VULNERABILITY INTELLIGENCE

CVE-2008-4307

CVSS score4 MEDIUM
EPSS probability0.28%
CISA KEVNot currently listed
Published2009-01-13
Last modified2026-06-16
CVSS vectorAV:L/AC:H/Au:N/C:N/I:N/A:C

Description

Race condition in the do_setlk function in fs/nfs/file.c in the Linux kernel before 2.6.26 allows local users to cause a denial of service (crash) via vectors resulting in an interrupted RPC call that leads to a stray FL_POSIX lock, related to improper handling of a race between fcntl and close in the EINTR case.

Weakness classification

  • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Primary references