NetSight
IP …
high7.2Public exploit code

CVE-2008-0600

The vmsplice_to_pipe function in Linux kernel 2.6.17 through 2.6.24.1 does not validate a certain userspace pointer before dereference, which allows local user…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The vmsplice_to_pipe function in Linux kernel 2.6.17 through 2.6.24.1 does not validate a certain userspace pointer before dereference, which allows local users to gain root privileges via crafted arguments in a vmsplice system call, a different vulnerability than CVE-2008-0009 and CVE-2008-0010.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
Versions 2.6.17, 2.6.17.1, 2.6.17.2, 2.6.17.3, 2.6.17.4, 2.6.17.5

Weakness classification

CWE-94

References