CVE-2008-1669

Publication date 8 May 2008

Last updated 24 July 2024


Ubuntu priority

Linux kernel before 2.6.25.2 does not apply a certain protection mechanism for fcntl functionality, which allows local users to (1) execute code in parallel or (2) exploit a race condition to obtain “re-ordered access to the descriptor table.”

Read the notes from the security team

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
linux 8.04 LTS hardy
Fixed 2.6.24-18.32
7.10 gutsy Not in release
7.04 feisty Not in release
6.06 LTS dapper Not in release
linux-source-2.6.15 8.04 LTS hardy Not in release
7.10 gutsy Not in release
7.04 feisty Not in release
6.06 LTS dapper
Fixed 2.6.15-52.67
linux-source-2.6.20 8.04 LTS hardy Not in release
7.10 gutsy Not in release
7.04 feisty
Fixed 2.6.20-17.36
6.06 LTS dapper Not in release
linux-source-2.6.22 8.04 LTS hardy Not in release
7.10 gutsy
Fixed 2.6.22-15.54
7.04 feisty Not in release
6.06 LTS dapper Not in release

Notes


kees

Message-Id: <1210012288.7889.19.camel@dhcp-lab-164.englab.brq.redhat.com>

References

Related Ubuntu Security Notices (USN)

    • USN-614-1
    • Linux kernel vulnerabilities
    • 3 June 2008
    • USN-618-1
    • Linux kernel vulnerabilities
    • 19 June 2008

Other references