CVE-2008-1675

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-05-02 · updated 2026-06-16
Weakness: CWE-399

Description

The bdx_ioctl_priv function in the tehuti driver (tehuti.c) in Linux kernel 2.6.x before 2.6.25.1 does not properly check certain information related to register size, which has unspecified impact and local attack vectors, probably related to reading or writing kernel memory.

Affected products

Linux kernel: 2.6.0, 2.6.1, 2.6.2, 2.6.10, 2.6.11, 2.6.11.1 (+215)

References

http://marc.info/?l=linux-kernel&m=120949204519706&w=2
http://marc.info/?l=linux-kernel&m=120949204619718&w=2
http://marc.info/?l=linux-kernel&m=120949582428998&w=2
http://secunia.com/advisories/30017
http://secunia.com/advisories/30044
http://secunia.com/advisories/30260
http://secunia.com/advisories/30515
http://wiki.rpath.com/Advisories:rPSA-2008-0157
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0157
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.1
http://www.mandriva.com/security/advisories?name=MDVSA-2008:109
http://www.mandriva.com/security/advisories?name=MDVSA-2008:167

Get alerted when CVE-2008-1675 or the next vulnerability affects your stack