NetSight
IP …
low2.1Public exploit code

CVE-2008-0009

The vmsplice_to_user function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain userspace pointer before dereference, which …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The vmsplice_to_user function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain userspace pointer before dereference, which might allow local users to access arbitrary kernel memory locations.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
Versions 2.6.22, 2.6.22.1, 2.6.22.3, 2.6.22.4, 2.6.22.5, 2.6.22.6

Weakness classification

CWE-20

References