CVE-2008-5182

Severity: medium (CVSS 6.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-11-21 · updated 2026-06-16
Weakness: CWE-362

Description

The inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain privileges via unknown vectors related to race conditions in inotify watch removal and umount.

Affected products

Linux kernel: through 2.6.28; 2.6, 2.6.1, 2.6.2, 2.6.10, 2.6.11, 2.6.11.1 (+278)

References

http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.28-rc5
http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html
http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html
http://secunia.com/advisories/32998
http://secunia.com/advisories/33083
http://secunia.com/advisories/33348
http://secunia.com/advisories/33623
http://secunia.com/advisories/33641
http://secunia.com/advisories/33704
http://secunia.com/advisories/33706
http://secunia.com/advisories/33756
http://secunia.com/advisories/33854

Get alerted when CVE-2008-5182 or the next vulnerability affects your stack