CVE-2008-1669

Description

Linux kernel before 2.6.25.2 does not apply a certain protection mechanism for fcntl functionality, which allows local users to (1) execute code in parallel or (2) exploit a race condition to obtain "re-ordered access to the descriptor table."

Affected Platforms

Weakness Type

CWE-94, CWE-362

References

• http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html
• http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html
• http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html
• http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html
• http://lists.vmware.com/pipermail/security-announce/2008/000023.html
• http://secunia.com/advisories/30077