CVE-2008-4307

Published Jan 13, 2009

Last updated 2 years ago

Overview

Description
Race condition in the do_setlk function in fs/nfs/file.c in the Linux kernel before 2.6.26 allows local users to cause a denial of service (crash) via vectors resulting in an interrupted RPC call that leads to a stray FL_POSIX lock, related to improper handling of a race between fcntl and close in the EINTR case.
Source
secalert@redhat.com
NVD status
Modified

Risk scores

CVSS 2.0

Type
Primary
Base score
4
Impact score
6.9
Exploitability score
1.9
Vector string
AV:L/AC:H/Au:N/C:N/I:N/A:C

Weaknesses

nvd@nist.gov
CWE-362

Social media

Hype score
Not currently trending

Configurations