CVE-2008-0007

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-02-08 · updated 2026-06-16
Weakness: CWE-399

Description

Linux kernel before 2.6.22.17, when using certain drivers that register a fault handler that does not perform range checks, allows local users to access kernel memory via an out-of-range offset.

Affected products

Linux kernel: through 2.6.22.16

References

http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html
http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html
http://lists.vmware.com/pipermail/security-announce/2008/000023.html
http://lkml.org/lkml/2008/2/6/457
http://secunia.com/advisories/28806
http://secunia.com/advisories/28826
http://secunia.com/advisories/29058
http://secunia.com/advisories/29570
http://secunia.com/advisories/30018
http://secunia.com/advisories/30110
http://secunia.com/advisories/30112
http://secunia.com/advisories/30116

Get alerted when CVE-2008-0007 or the next vulnerability affects your stack