CVE-2008-5300

kernel: fix soft lockups/OOM issues with unix socket garbage collector

Published Dec 1, 2008 CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Description
Linux kernel 2.6.28 allows local users to cause a denial of service ("soft lockup" and process loss) via a large number of sendmsg function calls, which does not block during AF_UNIX garbage collection and triggers an OOM condition, a different vulnerability than CVE-2008-5029.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1681-1 New Linux 2.6.24 packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1687-1 New Linux 2.6.18 packages fix several vulnerabilities
EUVD EUVD EUVD-2008-5277 Linux kernel 2.6.28 allows local users to cause a denial of service ("soft lockup" and process loss) via a large number of sendmsg function calls, which does not block during AF_UNIX garbage collection and triggers an OOM condition, a different vulnerability than CVE-2008-5029.
Ubuntu USN Ubuntu USN USN-714-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-715-1 Linux kernel vulnerabilities
References
Link Providers
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=473259 cve-icon cve-icon
http://marc.info/?l=linux-netdev&m=122721862313564&w=2 cve-icon cve-icon
http://marc.info/?l=linux-netdev&m=122765505415944&w=2 cve-icon cve-icon
http://osvdb.org/50272 cve-icon cve-icon
http://secunia.com/advisories/32913 cve-icon cve-icon
http://secunia.com/advisories/32998 cve-icon cve-icon
http://secunia.com/advisories/33083 cve-icon cve-icon
http://secunia.com/advisories/33348 cve-icon cve-icon
http://secunia.com/advisories/33556 cve-icon cve-icon
http://secunia.com/advisories/33706 cve-icon cve-icon
http://secunia.com/advisories/33756 cve-icon cve-icon
http://secunia.com/advisories/33854 cve-icon cve-icon
http://securityreason.com/securityalert/4673 cve-icon cve-icon
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0332 cve-icon cve-icon
http://www.debian.org/security/2008/dsa-1681 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2009:032 cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2009-0014.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2009-0053.html cve-icon cve-icon
http://www.securityfocus.com/archive/1/499044/100/0/threaded cve-icon cve-icon
http://www.securityfocus.com/archive/1/512019/100/0/threaded cve-icon cve-icon
http://www.securityfocus.com/bid/32516 cve-icon cve-icon
http://www.ubuntu.com/usn/usn-715-1 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=470201 cve-icon cve-icon
https://exchange.xforce.ibmcloud.com/vulnerabilities/46943 cve-icon cve-icon
https://issues.rpath.com/browse/RPL-2915 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2008-5300 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10283 cve-icon cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11427 cve-icon cve-icon
https://rhn.redhat.com/errata/RHSA-2009-1550.html cve-icon cve-icon
https://usn.ubuntu.com/714-1/ cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2008-5300 cve-icon
https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01358.html cve-icon cve-icon
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 10:49 AM
Reserved
Dec 1, 2008, 12:00 AM
Status
Modified
Published
Dec 1, 2008, 5:30 PM
Modified
Jun 16, 2026, 10:59 PM
Severity
Important
Public date
Nov 20, 2008, 12:00 AM