What’s Vulnerable › Vulnerabilities

CVE-2008-1375

• Severity: medium (CVSS 6.9 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2008-05-02 · updated 2026-06-16
• Weakness: CWE-362

Description

Race condition in the directory notification subsystem (dnotify) in Linux kernel 2.6.x before 2.6.24.6, and 2.6.25 before 2.6.25.1, allows local users to cause a denial of service (OOPS) and possibly gain privileges via unspecified vectors.

Affected products

• Canonical Ubuntu Linux: 6.06, 7.04, 7.10, 8.04
• Debian Linux: 4.0
• Fedoraproject Fedora: 8
• Linux kernel: from 2.6.0 before 2.6.24.6; 2.6.25 — fixed in 2.6.24.6
• Opensuse: 10.2, 10.3
• SUSE Linux Enterprise Server 15 SP1: 10-sp1
• SUSE Linux Enterprise Server: 9, 10-sp1
• SUSE Linux Enterprise Software Development Kit: 10-sp1

How to fix

Upgrade to a fixed version: Linux kernel 2.6.24.6. Check the vendor advisory for mitigations.

References

• http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html
• http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00000.html
• http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html
• http://lists.vmware.com/pipermail/security-announce/2008/000023.html
• http://marc.info/?l=linux-kernel&m=120967963803205&w=2
• http://marc.info/?l=linux-kernel&m=120967964303224&w=2
• http://secunia.com/advisories/30017
• http://secunia.com/advisories/30018
• http://secunia.com/advisories/30044
• http://secunia.com/advisories/30108
• http://secunia.com/advisories/30110
• http://secunia.com/advisories/30112

Get alerted when CVE-2008-1375 or the next vulnerability affects your stack