peter bassill · operator
$ cve CVE-2008-0600 JSON

CVE-2008-0600 EXPLOIT

7.2
HIGH · CVSS 2.0 · EPSS 3.5% (pctl 89)

Patch early

A public exploit exists.

Description

The vmsplice_to_pipe function in Linux kernel 2.6.17 through 2.6.24.1 does not validate a certain userspace pointer before dereference, which allows local users to gain root privileges via crafted arguments in a vmsplice system call, a different vulnerability than CVE-2008-0009 and CVE-2008-0010.

Scoring

CVSS7.2 (HIGH, v2.0)
VectorAV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS3.54% — more likely to be exploited than 89% of all CVEs
WeaknessCWE-94
On CISA KEVno
Public exploityes
Published2008-02-12
Last modified2026-06-16

Affected (1)

VendorProduct
linuxlinux kernel

Public exploits

SourceTitleDate
exploit-dbLinux Kernel 2.6.17 < 2.6.24.1 - 'vmsplice' Local Privilege Escalation (2)2008-02-09
exploit-dbLinux Kernel 2.6.23 < 2.6.24 - 'vmsplice' Local Privilege Escalation (1)2008-02-09

References

→ the Explorer  ·  watch your stack  ·  NVD