CVE-2008-2372

The Linux kernel 2.6.24 and 2.6.25 before 2.6.25.9 allows local users to cause a denial of service (memory consumption) via a large number of calls to the get_user_pages function, which lacks a ZERO_PAGE optimization and results in allocation of "useless newly zeroed pages."
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*

History

No history.

Information

Published : 2008-07-02 16:41

Updated : 2024-02-04 17:33


NVD link : CVE-2008-2372

Mitre link : CVE-2008-2372

CVE.ORG link : CVE-2008-2372


JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-20

Improper Input Validation