CVE-2008-6107

Severity: medium (CVSS 4.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-02-10 · updated 2026-06-16
Weakness: CWE-399

Description

The (1) sys32_mremap function in arch/sparc64/kernel/sys_sparc32.c, the (2) sparc_mmap_check function in arch/sparc/kernel/sys_sparc.c, and the (3) sparc64_mmap_check function in arch/sparc64/kernel/sys_sparc.c, in the Linux kernel before 2.6.25.4, omit some virtual-address range (aka span) checks when the mremap MREMAP_FIXED bit is not set, which allows local users to cause a denial of service (panic) via unspecified mremap calls, a related issue to CVE-2008-2137.

Affected products

Linux kernel: through 2.6.24.4; 2.2.27, 2.4.36, 2.4.36.1, 2.4.36.2, 2.4.36.3, 2.4.36.4 (+231)

References

http://marc.info/?l=linux-kernel&m=121071103304610&w=2
http://secunia.com/advisories/30258
http://securitytracker.com/id?1020120
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.4
http://www.securityfocus.com/bid/33836
http://www.ubuntu.com/usn/usn-751-1
http://www.vupen.com/english/advisories/2008/1655/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/48710
http://marc.info/?l=linux-kernel&m=121071103304610&w=2
http://secunia.com/advisories/30258
http://securitytracker.com/id?1020120
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.4

Get alerted when CVE-2008-6107 or the next vulnerability affects your stack