← Database

CVE-2008-1294

LOW CVSS: 2.1 Published: 2008-05-02 Modified: 2026-06-16

Description

Linux kernel 2.6.17, and other versions before 2.6.22, does not check when a user attempts to set RLIMIT_CPU to 0 until after the change is made, which allows local users to bypass intended resource limits.

Affected Platforms

Linux Linux Kernel

Weakness Type

CWE-20, CWE-399

References