NetSight
IP …
medium5.5Public exploit code

CVE-2008-4302

fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the add_to_page_cache_lru function, and subsequen…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the add_to_page_cache_lru function, and subsequently attempts to unlock a page that was not locked, which allows local users to cause a denial of service (kernel BUG and system crash), as demonstrated by the fio I/O tool.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 2.6.22.2
DebianDebian Linux
Version 4.0
RedhatEnterprise Linux
Version 5.0

Weakness classification

CWE-667

References