CVE-2008-0600

The vmsplice_to_pipe function in Linux kernel 2.6.17 through 2.6.24.1 does not validate a certain userspace pointer before dereference, which allows local users to gain root privileges via crafted arguments in a vmsplice system call, a different vulnerability than CVE-2008-0009 and CVE-2008-0010.

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

3.54% chance of exploitation in the next 30 days, 88th percentile

Published

2008-02-12

Updated

2024-08-07

Proof-of-concept exploits (5)

• http://marc.info/?l=linux-kernel&m=120263652322197&w=2
• http://marc.info/?l=linux-kernel&m=120266353621139&w=2
• http://marc.info/?l=linux-kernel&m=120264520431307&w=2
• http://marc.info/?l=linux-kernel&m=120266328220808&w=2
• http://marc.info/?l=linux-kernel&m=120264773202422&w=2

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/5093
• https://www.exploit-db.com/exploits/5092

Exploit collections (1)

• helloexp/0day/tree/master/98-Linux%E6%8F%90%E6%9D%83/2008/CVE-2008-0600

References

• CVE Record
• NVD entry

Related

• CVE-2008-0590
• CVE-2008-0601
• CVE-2008-0579
• CVE-2008-0602
• CVE-2008-0574
• CVE-2008-0603