Vulnerability Name:

CVE-2008-4307 (CCN-47923)

Assigned:2008-10-30
Published:2008-10-30
Updated:2023-02-13
Summary:Race condition in the do_setlk function in fs/nfs/file.c in the Linux kernel before 2.6.26 allows local users to cause a denial of service (crash) via vectors resulting in an interrupted RPC call that leads to a stray FL_POSIX lock, related to improper handling of a race between fcntl and close in the EINTR case.
CVSS v3 Severity:4.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Low
CVSS v2 Severity:4.0 Medium (CVSS v2 Vector: AV:L/AC:H/Au:N/C:N/I:N/A:C)
3.0 Low (Temporal CVSS v2 Vector: AV:L/AC:H/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): High
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
2.1 Low (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P)
1.6 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
4.9 Medium (REDHAT CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C)
3.7 Low (REDHAT Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2008-4307

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: CCN
Type: oss-security Mailing List, Tue, 13 Jan 2009 19:23:59 +0800
CVE-2008-4307 kernel: local denial of service in locks_remove_flock

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: CCN
Type: RHSA-2009-0451
Important: kernel-rt security and bug fix update

Source: CCN
Type: RHSA-2009-0459
Important: kernel security and bug fix update

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: CCN
Type: RHSA-2009-0473
Important: kernel security and bug fix update

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: CCN
Type: ASA-2009-167
kernel security and bug fix update (RHSA-2009-0473)

Source: CCN
Type: ASA-2009-176
kernel security and bug fix update (RHSA-2009-0459)

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: DEBIAN
Type: DSA-1787
linux-2.6.24 -- denial of service/privilege escalation/information leak

Source: DEBIAN
Type: DSA-1794
linux-2.6 -- denial of service/privilege escalation/information leak

Source: CCN
Type: The Linux Kernel Archives Web site
ChangeLog-2.6.26

Source: secalert@redhat.com
Type: Vendor Advisory
secalert@redhat.com

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: CCN
Type: BID-33237
Linux Kernel 'locks_remove_flock()' Local Race Condition Vulnerability

Source: CCN
Type: USN-751-1
Linux kernel vulnerabilities

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: CCN
Type: USN-752-1
Linux kernel vulnerabilities

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: CCN
Type: Red Hat Bugzilla Bug 456282
CVE-2008-4307 Kernel BUG() in locks_remove_flock

Source: XF
Type: UNKNOWN
linux-kernel-dosetlk-dos(47923)

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Vulnerable Configuration:Configuration RedHat 1:
  • cpe:/o:redhat:enterprise_linux:4:*:*:*:*:*:*:*
    • Configuration RedHat 2:
  • cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*
    • Configuration RedHat 3:
  • cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*
    • Configuration RedHat 4:
  • cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*
    • Configuration RedHat 5:
  • cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*
    • Configuration RedHat 6:
  • cpe:/o:redhat:enterprise_linux:5:*:*:*:*:*:*:*
    • Configuration RedHat 7:
  • cpe:/o:redhat:enterprise_linux:5::client:*:*:*:*:*
    • Configuration RedHat 8:
  • cpe:/o:redhat:enterprise_linux:5::server:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/o:linux:linux_kernel:2.6.23:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.18:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.22:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.25:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.22:rc1:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.22:rc7:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.24:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.25.12::x86_64:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.25.11::x86_64:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.25.8::x86_64:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.25.7::x86_64:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.25.6::x86_64:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.25.5::x86_64:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.25.4::x86_64:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.25.3::x86_64:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.25.2::x86_64:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.25.10::x86_64:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.25.1::x86_64:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.25.9::x86_64:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.25::x86_64:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.0:-:*:*:*:*:*:*
  • AND
  • cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*
  • OR cpe:/o:canonical:ubuntu:6.06::lts:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:5:*:*:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:4.0:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:5:*:client:*:*:*:*:*
  • OR cpe:/o:canonical:ubuntu:7.10:*:*:*:*:*:*:*
  • OR cpe:/o:canonical:ubuntu:8.04::lts:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.mitre.oval:def:29446
    P
    		RHSA-2009:0473 -- kernel security and bug fix update (Important)
    2015-08-17
    oval:org.mitre.oval:def:12994
    P
    		USN-751-1 -- linux, linux-source-2.6.22 vulnerabilities
    2014-06-30
    oval:org.mitre.oval:def:13816
    P
    		USN-752-1 -- linux-source-2.6.15 vulnerabilities
    2014-06-30
    oval:org.mitre.oval:def:13537
    P
    		DSA-1787-1 linux-2.6.24 -- denial of service/privilege escalation/information leak
    2014-06-23
    oval:org.mitre.oval:def:7794
    P
    		DSA-1794 linux-2.6 -- denial of service/privilege escalation/information leak
    2014-06-23
    oval:org.mitre.oval:def:13686
    P
    		DSA-1794-1 linux-2.6 -- denial of service/privilege escalation/information leak
    2014-06-23
    oval:org.mitre.oval:def:22879
    P
    		ELSA-2009:0473: kernel security and bug fix update (Important)
    2014-05-26
    oval:org.mitre.oval:def:7728
    V
    		VMware kernel race condition in the do_setlk function vulnerability
    2014-01-20
    oval:org.mitre.oval:def:9233
    V
    		Race condition in the do_setlk function in fs/nfs/file.c in the Linux kernel before 2.6.26 allows local users to cause a denial of service (crash) via vectors resulting in an interrupted RPC call that leads to a stray FL_POSIX lock, related to improper handling of a race between fcntl and close in the EINTR case.
    2013-04-29
    oval:com.redhat.rhsa:def:20090473
    P
    		RHSA-2009:0473: kernel security and bug fix update (Important)
    2009-05-07
    oval:org.debian:def:1794
    V
    		denial of service/privilege escalation/information leak
    2009-05-06
    oval:org.debian:def:1787
    V
    		denial of service/privilege escalation/information leak
    2009-05-02
    oval:com.redhat.rhsa:def:20090459
    P
    		RHSA-2009:0459: kernel security and bug fix update (Important)
    2009-04-30
    BACK
    linux linux kernel 2.6.23
    linux linux kernel 2.6.18
    linux linux kernel 2.6.22
    linux linux kernel 2.6.18 rc5
    linux linux kernel 2.6.18 rc2
    linux linux kernel 2.6.18 rc1
    linux linux kernel 2.6.23 rc1
    linux linux kernel 2.6.22.1
    linux linux kernel 2.6.18 rc3
    linux linux kernel 2.6.18 rc4
    linux linux kernel 2.6.18 rc6
    linux linux kernel 2.6.18 rc7
    linux linux kernel 2.6.19.4
    linux linux kernel 2.6.23.9
    linux linux kernel 2.6.22.2
    linux linux kernel 2.6.22.8
    linux linux kernel 2.6.22.9
    linux linux kernel 2.6.22.10
    linux linux kernel 2.6.22.11
    linux linux kernel 2.6.22.12
    linux linux kernel 2.6.22.13
    linux linux kernel 2.6.22.14
    linux linux kernel 2.6.22.15
    linux linux kernel 2.6.22.17
    linux linux kernel 2.6.22.18
    linux linux kernel 2.6.22.19
    linux linux kernel 2.6.22.20
    linux linux kernel 2.6.22.21
    linux linux kernel 2.6.25.2
    linux linux kernel 2.4.36
    linux linux kernel 2.4.36.1
    linux linux kernel 2.4.36.2
    linux linux kernel 2.4.36.3
    linux linux kernel 2.4.36.4
    linux linux kernel 2.4.36.5
    linux linux kernel 2.6.21.6
    linux linux kernel 2.6.21.7
    linux linux kernel 2.6.24.1
    linux linux kernel 2.6.24.2
    linux linux kernel 2.6.25
    linux linux kernel 2.6.25.1
    linux linux kernel 2.6.22 rc1
    linux linux kernel 2.6.22 rc7
    linux linux kernel 2.6.23.10
    linux linux kernel 2.6.24.6
    linux linux kernel 2.6.24 rc1
    linux linux kernel 2.6.25.3
    linux linux kernel 2.6.25.4
    linux linux kernel 2.6.24
    linux linux kernel 2.6.24.3
    linux linux kernel 2.6.24.4
    linux linux kernel 2.6.24.5
    linux linux kernel 2.6.23.11
    linux linux kernel 2.6.23.12
    linux linux kernel 2.6.23.13
    linux linux kernel 2.6.23.8
    linux linux kernel 2.6.21.5
    linux linux kernel 2.6.25.5
    linux linux kernel 2.6.25.6
    linux linux kernel 2.6.25.7
    linux linux kernel 2.6.25.8
    linux linux kernel 2.6.25.9
    linux linux kernel 2.6.25.10
    linux linux kernel 2.6.19.5
    linux linux kernel 2.6.19.6
    linux linux kernel 2.6.19.7
    linux linux kernel 2.6.20.16
    linux linux kernel 2.6.20.17
    linux linux kernel 2.6.20.18
    linux linux kernel 2.6.20.19
    linux linux kernel 2.6.20.20
    linux linux kernel 2.6.20.21
    linux linux kernel 2.6.23.15
    linux linux kernel 2.6.23.16
    linux linux kernel 2.6.23.17
    linux linux kernel 2.6.24.7
    linux linux kernel 2.6.25.11
    linux linux kernel 2.6.25.12
    linux linux kernel 2.6.25.13
    linux linux kernel 2.6.25.14
    linux linux kernel 2.6.25.15
    linux linux kernel 2.6.24 rc4
    linux linux kernel 2.6.24 rc5
    linux linux kernel 2.6.22.22
    linux linux kernel 2.6.25.16
    linux linux kernel 2.6.25.17
    linux linux kernel 2.4.36.6
    linux linux kernel 2.2.27
    linux linux kernel 2.6.25.12
    linux linux kernel 2.6.25.11
    linux linux kernel 2.6.25.8
    linux linux kernel 2.6.25.7
    linux linux kernel 2.6.25.6
    linux linux kernel 2.6.25.5
    linux linux kernel 2.6.25.4
    linux linux kernel 2.6.25.3
    linux linux kernel 2.6.25.2
    linux linux kernel 2.6.25.10
    linux linux kernel 2.6.25.1
    linux linux kernel 2.6.25.9
    linux linux kernel 2.6.25
    linux linux kernel 2.6.0
    redhat enterprise linux 4
    redhat enterprise linux 4
    redhat enterprise linux 4
    redhat enterprise linux 4
    canonical ubuntu 6.06
    redhat enterprise linux 5
    debian debian linux 4.0
    redhat enterprise linux 5
    canonical ubuntu 7.10
    canonical ubuntu 8.04