VULNERABILITY INTELLIGENCE
CVE-2008-0010
CVSS score2.1 LOW
EPSS probability0.89%
CISA KEVNot currently listed
Published2008-02-12
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:N
Description
The copy_from_user_mmap_sem function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain userspace pointer before dereference, which allow local users to read from arbitrary kernel memory locations.
Weakness classification
- CWE-20: Improper Input Validation