NetSight
IP …
low2.1Public exploit code

CVE-2008-0010

The copy_from_user_mmap_sem function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain userspace pointer before dereference,…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The copy_from_user_mmap_sem function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain userspace pointer before dereference, which allow local users to read from arbitrary kernel memory locations.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
Versions 2.6.22, 2.6.22.1, 2.6.22.3, 2.6.22.4, 2.6.22.5, 2.6.22.6

Weakness classification

CWE-20

References