VULNERABILITY INTELLIGENCE

CVE-2008-5079

CVSS score4.9 MEDIUM
EPSS probability1.09%
CISA KEVNot currently listed
Published2008-12-09
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:N/A:C

Description

net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service (kernel infinite loop) by making two calls to svc_listen for the same socket, and then reading a /proc/net/atm/*vc file, related to corruption of the vcc table.

Primary references