CVE-2008-0598

Publication date 30 June 2008

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

Unspecified vulnerability in the 32-bit and 64-bit emulation in the Linux kernel 2.6.9, 2.6.18, and probably other versions allows local users to read uninitialized memory via unknown vectors involving a crafted binary.

From the Ubuntu Security Team

Tavis Ormandy discovered that the ia32 emulation under 64bit kernels did not fully clear uninitialized data. A local attacker could read private kernel memory, leading to a loss of privacy.

Read the notes from the security team

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
linux 8.04 LTS hardy
Not affected
7.10 gutsy Not in release
7.04 feisty Not in release
6.10 edgy Not in release
6.06 LTS dapper Not in release
linux-source-2.6.15 8.04 LTS hardy Not in release
7.10 gutsy Not in release
7.04 feisty Not in release
6.10 edgy Not in release
6.06 LTS dapper
Fixed 2.6.15-52.69
linux-source-2.6.17 8.04 LTS hardy Not in release
7.10 gutsy Not in release
7.04 feisty Not in release
6.10 edgy
Not affected
6.06 LTS dapper Not in release
linux-source-2.6.20 8.04 LTS hardy Not in release
7.10 gutsy Not in release
7.04 feisty
Not affected
6.10 edgy Not in release
6.06 LTS dapper Not in release
linux-source-2.6.22 8.04 LTS hardy Not in release
7.10 gutsy
Not affected
7.04 feisty Not in release
6.10 edgy Not in release
6.06 LTS dapper Not in release

Notes

kees

needs http://lkml.org/lkml/diff/2008/6/25/157/1 maybe linux-2.6: 64649a58919e66ec21792dbb6c48cb3da22cbd7f

References

Related Ubuntu Security Notices (USN)

    • USN-625-1
    • Linux kernel vulnerabilities
    • 15 July 2008

Other references