CVE-2008-7256

kernel: nfsd: fix vm overcommit crash

Published Jun 3, 2010 CVSS 2.0 · 1.2 Low EPSS < 1% KEV · Not listed
Description
mm/shmem.c in the Linux kernel before 2.6.28-rc8, when strict overcommit is enabled and CONFIG_SECURITY is disabled, does not properly handle the export of shmemfs objects by knfsd, which allows attackers to cause a denial of service (NULL pointer dereference and knfsd crash) or possibly have unspecified other impact via unknown vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-1643.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2008-7212 mm/shmem.c in the Linux kernel before 2.6.28-rc8, when strict overcommit is enabled and CONFIG_SECURITY is disabled, does not properly handle the export of shmemfs objects by knfsd, which allows attackers to cause a denial of service (NULL pointer dereference and knfsd crash) or possibly have unspecified other impact via unknown vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-1643.
Ubuntu USN Ubuntu USN USN-966-1 Linux kernel vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 11:56 AM
Reserved
Jun 3, 2010, 12:00 AM
Status
Modified
Published
Jun 3, 2010, 2:30 PM
Modified
Jun 16, 2026, 11:03 PM
Severity
Important
Public date
Oct 30, 2008, 12:00 AM