CVE-2008-1669

CVE Descriptions

Linux kernel before 2.6.25.2 does not apply a certain protection mechanism for fcntl functionality, which allows local users to (1) execute code in parallel or (2) exploit a race condition to obtain "re-ordered access to the descriptor table."

CVE Informations

Related Weaknesses

CWE-ID	Weakness Name	Source
CWE-94	Improper Control of Generation of Code ('Code Injection') The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
CWE-362	Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Metrics

Metrics	Score	Severity	CVSS Vector	Source
V2	6.9		AV:L/AC:M/Au:N/C:C/I:C/A:C	nvd@nist.gov

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

EPSS First.org

Products Mentioned

Configuraton 0

Linux>>Linux_kernel >> Version 2.6.0

Linux>>Linux_kernel >> Version 2.6.1

Linux>>Linux_kernel >> Version 2.6.2

Linux>>Linux_kernel >> Version 2.6.3

Linux>>Linux_kernel >> Version 2.6.4

Linux>>Linux_kernel >> Version 2.6.5

Linux>>Linux_kernel >> Version 2.6.6

Linux>>Linux_kernel >> Version 2.6.7

Linux>>Linux_kernel >> Version 2.6.8

Linux>>Linux_kernel >> Version 2.6.8.1

Linux>>Linux_kernel >> Version 2.6.8.1.5

Linux>>Linux_kernel >> Version 2.6.9

Linux>>Linux_kernel >> Version 2.6.10

Linux>>Linux_kernel >> Version 2.6.11

Linux>>Linux_kernel >> Version 2.6.11.1

Linux>>Linux_kernel >> Version 2.6.11.2

Linux>>Linux_kernel >> Version 2.6.11.3

Linux>>Linux_kernel >> Version 2.6.11.4

Linux>>Linux_kernel >> Version 2.6.11.5

Linux>>Linux_kernel >> Version 2.6.11.6

Linux>>Linux_kernel >> Version 2.6.11.7

Linux>>Linux_kernel >> Version 2.6.11.8

Linux>>Linux_kernel >> Version 2.6.11.9

Linux>>Linux_kernel >> Version 2.6.11.10

Linux>>Linux_kernel >> Version 2.6.11.11

Linux>>Linux_kernel >> Version 2.6.11.12

Linux>>Linux_kernel >> Version 2.6.11_rc1_bk6

Linux>>Linux_kernel >> Version 2.6.12

Linux>>Linux_kernel >> Version 2.6.12.1

Linux>>Linux_kernel >> Version 2.6.12.2

Linux>>Linux_kernel >> Version 2.6.12.3

Linux>>Linux_kernel >> Version 2.6.12.4

Linux>>Linux_kernel >> Version 2.6.12.5

Linux>>Linux_kernel >> Version 2.6.12.6

Linux>>Linux_kernel >> Version 2.6.12.12

Linux>>Linux_kernel >> Version 2.6.12.22

Linux>>Linux_kernel >> Version 2.6.13

Linux>>Linux_kernel >> Version 2.6.13.1

Linux>>Linux_kernel >> Version 2.6.13.2

Linux>>Linux_kernel >> Version 2.6.13.3

Linux>>Linux_kernel >> Version 2.6.13.4

Linux>>Linux_kernel >> Version 2.6.13.5

Linux>>Linux_kernel >> Version 2.6.14

Linux>>Linux_kernel >> Version 2.6.14.1

Linux>>Linux_kernel >> Version 2.6.14.2

Linux>>Linux_kernel >> Version 2.6.14.3

Linux>>Linux_kernel >> Version 2.6.14.4

Linux>>Linux_kernel >> Version 2.6.14.5

Linux>>Linux_kernel >> Version 2.6.14.6

Linux>>Linux_kernel >> Version 2.6.14.7

Linux>>Linux_kernel >> Version 2.6.15

Linux>>Linux_kernel >> Version 2.6.15.1

Linux>>Linux_kernel >> Version 2.6.15.2

Linux>>Linux_kernel >> Version 2.6.15.3

Linux>>Linux_kernel >> Version 2.6.15.4

Linux>>Linux_kernel >> Version 2.6.15.5

Linux>>Linux_kernel >> Version 2.6.15.6

Linux>>Linux_kernel >> Version 2.6.15.7

Linux>>Linux_kernel >> Version 2.6.15.11

Linux>>Linux_kernel >> Version 2.6.16

Linux>>Linux_kernel >> Version 2.6.16.1

Linux>>Linux_kernel >> Version 2.6.16.2

Linux>>Linux_kernel >> Version 2.6.16.3

Linux>>Linux_kernel >> Version 2.6.16.4

Linux>>Linux_kernel >> Version 2.6.16.5

Linux>>Linux_kernel >> Version 2.6.16.6

Linux>>Linux_kernel >> Version 2.6.16.7

Linux>>Linux_kernel >> Version 2.6.16.8

Linux>>Linux_kernel >> Version 2.6.16.9

Linux>>Linux_kernel >> Version 2.6.16.10

Linux>>Linux_kernel >> Version 2.6.16.11

Linux>>Linux_kernel >> Version 2.6.16.12

Linux>>Linux_kernel >> Version 2.6.16.13

Linux>>Linux_kernel >> Version 2.6.16.14

Linux>>Linux_kernel >> Version 2.6.16.15

Linux>>Linux_kernel >> Version 2.6.16.16

Linux>>Linux_kernel >> Version 2.6.16.17

Linux>>Linux_kernel >> Version 2.6.16.18

Linux>>Linux_kernel >> Version 2.6.16.19

Linux>>Linux_kernel >> Version 2.6.16.20

Linux>>Linux_kernel >> Version 2.6.16.21

Linux>>Linux_kernel >> Version 2.6.16.22

Linux>>Linux_kernel >> Version 2.6.16.23

Linux>>Linux_kernel >> Version 2.6.16.24

Linux>>Linux_kernel >> Version 2.6.16.25

Linux>>Linux_kernel >> Version 2.6.16.26

Linux>>Linux_kernel >> Version 2.6.16.27

Linux>>Linux_kernel >> Version 2.6.16.28

Linux>>Linux_kernel >> Version 2.6.16.29

Linux>>Linux_kernel >> Version 2.6.16.30

Linux>>Linux_kernel >> Version 2.6.16.31

Linux>>Linux_kernel >> Version 2.6.16.32

Linux>>Linux_kernel >> Version 2.6.16.33

Linux>>Linux_kernel >> Version 2.6.16.34

Linux>>Linux_kernel >> Version 2.6.16.35

Linux>>Linux_kernel >> Version 2.6.16.36

Linux>>Linux_kernel >> Version 2.6.16.37

Linux>>Linux_kernel >> Version 2.6.16.38

Linux>>Linux_kernel >> Version 2.6.16.39

Linux>>Linux_kernel >> Version 2.6.16.40

Linux>>Linux_kernel >> Version 2.6.16.41

Linux>>Linux_kernel >> Version 2.6.16.43

Linux>>Linux_kernel >> Version 2.6.16.44

Linux>>Linux_kernel >> Version 2.6.16.45

Linux>>Linux_kernel >> Version 2.6.16.46

Linux>>Linux_kernel >> Version 2.6.16.47

Linux>>Linux_kernel >> Version 2.6.16.48

Linux>>Linux_kernel >> Version 2.6.16.49

Linux>>Linux_kernel >> Version 2.6.16.50

Linux>>Linux_kernel >> Version 2.6.16.51

Linux>>Linux_kernel >> Version 2.6.16.52

Linux>>Linux_kernel >> Version 2.6.16.53

Linux>>Linux_kernel >> Version 2.6.16_rc7

Linux>>Linux_kernel >> Version 2.6.17

Linux>>Linux_kernel >> Version 2.6.17.1

Linux>>Linux_kernel >> Version 2.6.17.2

Linux>>Linux_kernel >> Version 2.6.17.3

Linux>>Linux_kernel >> Version 2.6.17.4

Linux>>Linux_kernel >> Version 2.6.17.5

Linux>>Linux_kernel >> Version 2.6.17.6

Linux>>Linux_kernel >> Version 2.6.17.7

Linux>>Linux_kernel >> Version 2.6.17.8

Linux>>Linux_kernel >> Version 2.6.17.9

Linux>>Linux_kernel >> Version 2.6.17.10

Linux>>Linux_kernel >> Version 2.6.17.11

Linux>>Linux_kernel >> Version 2.6.17.12

Linux>>Linux_kernel >> Version 2.6.17.13

Linux>>Linux_kernel >> Version 2.6.17.14

Linux>>Linux_kernel >> Version 2.6.18

Linux>>Linux_kernel >> Version 2.6.18.1

Linux>>Linux_kernel >> Version 2.6.18.2

Linux>>Linux_kernel >> Version 2.6.18.3

Linux>>Linux_kernel >> Version 2.6.18.4

Linux>>Linux_kernel >> Version 2.6.18.5

Linux>>Linux_kernel >> Version 2.6.18.6

Linux>>Linux_kernel >> Version 2.6.18.7

Linux>>Linux_kernel >> Version 2.6.18.8

Linux>>Linux_kernel >> Version 2.6.19

Linux>>Linux_kernel >> Version 2.6.19.1

Linux>>Linux_kernel >> Version 2.6.19.2

Linux>>Linux_kernel >> Version 2.6.19.3

Linux>>Linux_kernel >> Version 2.6.20

Linux>>Linux_kernel >> Version 2.6.20.1

Linux>>Linux_kernel >> Version 2.6.20.2

Linux>>Linux_kernel >> Version 2.6.20.3

Linux>>Linux_kernel >> Version 2.6.20.4

Linux>>Linux_kernel >> Version 2.6.20.5

Linux>>Linux_kernel >> Version 2.6.20.6

Linux>>Linux_kernel >> Version 2.6.20.7

Linux>>Linux_kernel >> Version 2.6.20.8

Linux>>Linux_kernel >> Version 2.6.20.9

Linux>>Linux_kernel >> Version 2.6.20.10

Linux>>Linux_kernel >> Version 2.6.20.11

Linux>>Linux_kernel >> Version 2.6.20.12

Linux>>Linux_kernel >> Version 2.6.20.13

Linux>>Linux_kernel >> Version 2.6.20.14

Linux>>Linux_kernel >> Version 2.6.20.15

Linux>>Linux_kernel >> Version 2.6.21

Linux>>Linux_kernel >> Version 2.6.21.1

Linux>>Linux_kernel >> Version 2.6.21.2

Linux>>Linux_kernel >> Version 2.6.21.3

Linux>>Linux_kernel >> Version 2.6.21.4

Linux>>Linux_kernel >> Version 2.6.22

Linux>>Linux_kernel >> Version 2.6.22.1

Linux>>Linux_kernel >> Version 2.6.22.3

Linux>>Linux_kernel >> Version 2.6.22.4

Linux>>Linux_kernel >> Version 2.6.22.5

Linux>>Linux_kernel >> Version 2.6.22.6

Linux>>Linux_kernel >> Version 2.6.22.7

Linux>>Linux_kernel >> Version 2.6.22.16

Linux>>Linux_kernel >> Version 2.6.23

Linux>>Linux_kernel >> Version 2.6.23.1

Linux>>Linux_kernel >> Version 2.6.23.2

Linux>>Linux_kernel >> Version 2.6.23.3

Linux>>Linux_kernel >> Version 2.6.23.4

Linux>>Linux_kernel >> Version 2.6.23.5

Linux>>Linux_kernel >> Version 2.6.23.6

Linux>>Linux_kernel >> Version 2.6.23.7

Linux>>Linux_kernel >> Version 2.6.23.9

Linux>>Linux_kernel >> Version 2.6.23.14

Linux>>Linux_kernel >> Version 2.6.24

Linux>>Linux_kernel >> Version 2.6.24.1

Linux>>Linux_kernel >> Version 2.6.24.2

Linux>>Linux_kernel >> Version 2.6.24.3

Linux>>Linux_kernel >> Version 2.6.24.4

Linux>>Linux_kernel >> Version 2.6.24.5

Linux>>Linux_kernel >> Version 2.6.25

Linux>>Linux_kernel >> Version 2.6.25.1

Linux>>Linux_kernel >> Version 2.6_test9_cvs

References

http://secunia.com/advisories/30276
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/30962
Tags : third-party-advisory, x_refsource_SECUNIA

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html
Tags : vendor-advisory, x_refsource_SUSE

http://www.securityfocus.com/archive/1/491740/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.2
Tags : x_refsource_CONFIRM

https://issues.rpath.com/browse/RPL-2518
Tags : x_refsource_CONFIRM

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html
Tags : vendor-advisory, x_refsource_SUSE

http://www.redhat.com/support/errata/RHSA-2008-0237.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.vupen.com/english/advisories/2008/1451/references
Tags : vdb-entry, x_refsource_VUPEN

http://www.vupen.com/english/advisories/2008/1452/references
Tags : vdb-entry, x_refsource_VUPEN

http://www.mandriva.com/security/advisories?name=MDVSA-2008:167
Tags : vendor-advisory, x_refsource_MANDRIVA

http://www.ubuntu.com/usn/usn-618-1
Tags : vendor-advisory, x_refsource_UBUNTU

http://secunia.com/advisories/30982
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securityfocus.com/bid/29076
Tags : vdb-entry, x_refsource_BID

http://secunia.com/advisories/30116
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.redhat.com/support/errata/RHSA-2008-0233.html
Tags : vendor-advisory, x_refsource_REDHAT

http://secunia.com/advisories/30110
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.debian.org/security/2008/dsa-1575
Tags : vendor-advisory, x_refsource_DEBIAN

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10065
Tags : vdb-entry, signature, x_refsource_OVAL

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00232.html
Tags : vendor-advisory, x_refsource_FEDORA

http://www.vupen.com/english/advisories/2008/2222/references
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/30515
Tags : third-party-advisory, x_refsource_SECUNIA

https://usn.ubuntu.com/614-1/
Tags : vendor-advisory, x_refsource_UBUNTU

http://www.securitytracker.com/id?1019974
Tags : vdb-entry, x_refsource_SECTRACK

http://www.mandriva.com/security/advisories?name=MDVSA-2008:105
Tags : vendor-advisory, x_refsource_MANDRIVA

http://secunia.com/advisories/30101
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/30164
Tags : third-party-advisory, x_refsource_SECUNIA

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0162
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/30108
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.4
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/30252
Tags : third-party-advisory, x_refsource_SECUNIA

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00357.html
Tags : vendor-advisory, x_refsource_FEDORA

http://www.redhat.com/support/errata/RHSA-2008-0211.html
Tags : vendor-advisory, x_refsource_REDHAT

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00294.html
Tags : vendor-advisory, x_refsource_FEDORA

http://secunia.com/advisories/30769
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/30077
Tags : third-party-advisory, x_refsource_SECUNIA

http://lists.vmware.com/pipermail/security-announce/2008/000023.html
Tags : mailing-list, x_refsource_MLIST

https://exchange.xforce.ibmcloud.com/vulnerabilities/42242
Tags : vdb-entry, x_refsource_XF

http://www.mandriva.com/security/advisories?name=MDVSA-2008:104
Tags : vendor-advisory, x_refsource_MANDRIVA

http://secunia.com/advisories/30260
Tags : third-party-advisory, x_refsource_SECUNIA

http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html
Tags : vendor-advisory, x_refsource_SUSE

http://secunia.com/advisories/31246
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/30818
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/30112
Tags : third-party-advisory, x_refsource_SECUNIA

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html
Tags : vendor-advisory, x_refsource_SUSE

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	3.05%	–	–
2022-04-03	–	–	3.05%	–	–
2022-06-26	–	–	3.05%	–	–
2023-02-05	–	–	4.42%	–	–
2023-02-19	–	–	3.05%	–	–
2023-02-26	–	–	3.05%	–	–
2023-03-12	–	–	–	0.04%	–
2023-11-05	–	–	–	0.04%	–
2023-12-03	–	–	–	0.04%	–
2024-03-31	–	–	–	0.04%	–
2024-06-02	–	–	–	0.04%	–
2024-08-25	–	–	–	0.04%	–
2024-12-08	–	–	–	0.04%	–
2025-01-19	–	–	–	0.04%	–
2025-03-09	–	–	–	0.04%	–
2025-03-09	–	–	–	0.04%	–
2025-03-18	–	–	–	–	0.11%
2025-03-30	–	–	–	–	0.11%
2025-04-15	–	–	–	–	0.11%
2025-06-23	–	–	–	–	0.13%
2025-08-11	–	–	–	–	0.13%
2025-08-14	–	–	–	–	0.13%
2025-08-18	–	–	–	–	0.13%
2025-08-20	–	–	–	–	0.13%
2025-08-25	–	–	–	–	0.13%
2025-08-29	–	–	–	–	0.13%
2025-08-30	–	–	–	–	0.13%
2025-09-08	–	–	–	–	0.13%
2025-09-09	–	–	–	–	0.13%
2025-09-10	–	–	–	–	0.13%
2025-09-15	–	–	–	–	0.13%
2025-09-16	–	–	–	–	0.13%
2025-10-20	–	–	–	–	0.13%
2025-10-22	–	–	–	–	0.13%
2025-11-04	–	–	–	–	0.13%
2025-11-13	–	–	–	–	0.13%
2025-11-16	–	–	–	–	0.13%
2025-11-18	–	–	–	–	0.13%
2025-11-21	–	–	–	–	0.13%
2025-11-25	–	–	–	–	0.12%

Date	Percentile
2022-02-06	65%
2022-04-03	82%
2022-06-26	83%
2023-02-05	88%
2023-02-19	83%
2023-02-26	84%
2023-03-12	8%
2023-11-05	9%
2023-12-03	8%
2024-03-31	9%
2024-06-02	1%
2024-08-25	11%
2024-12-08	12%
2025-01-19	12%
2025-03-09	13%
2025-03-09	13%
2025-03-18	28%
2025-03-30	27%
2025-04-15	31%
2025-06-23	34%
2025-08-11	33%
2025-08-14	34%
2025-08-18	33%
2025-08-20	34%
2025-08-25	33%
2025-08-29	34%
2025-08-30	33%
2025-09-08	34%
2025-09-09	33%
2025-09-10	34%
2025-09-15	33%
2025-09-16	34%
2025-10-20	33%
2025-10-22	34%
2025-11-04	33%
2025-11-13	34%
2025-11-16	33%
2025-11-18	28%
2025-11-21	33%
2025-11-25	32%

CVE-2008-1669 : Detail