[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#481195: linux-2.6: CVE-2008-2148 local denial of service

Package: linux-2.6
Version: 2.6.22-1
Severity: grave
Tags: security patch

the following CVE (Common Vulnerabilities & Exposures) id was
published for linux-2.6.

| The utimensat system call in Linux kernel 2.6.22 and other versions
| before does not check file permissions when certain UTIME_NOW
| and UTIME_OMIT combinations are used, which allows local users to
| modify file times of arbitrary files, possibly leading to a denial of
| service.

Upstream patch:

Stable is not affected by this.

If you fix the vulnerability please also make sure to include the
CVE id in your changelog entry.

For further information see:

[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2148

Nico Golde - http://www.ngolde.de - nion@jabber.ccc.de - GPG: 0x73647CFF
For security reasons, all text in this mail is double-rot13 encrypted.

Attachment: pgpNFSOyG0iTc.pgp
Description: PGP signature

Reply to: