CVE-2008-5700

Low

Description

libata in the Linux kernel before 2.6.27.9 does not set minimum timeouts for SG_IO requests, which allows local users to cause a denial of service (Programmed I/O mode on drives) via multiple simultaneous invocations of an unspecified test program.

SeverityLow
CVSS1.9
Exploit probability—
ProductLinux Kernel
PublishedDec 22, 2008
First seenDec 22, 2008

How to fix

Vendor advisories

Affected products

ProductAffected versionsFixed in
linux linux_kernelv ≤ 2.6.27.8, 2.2.27, 2.4.36, 2.4.36.1, 2.4.36.2, 2.4.36.3, 2.4.36.4, 2.4.36.5, 2.4.36.6, 2.6, 2.6.18, 2.6.19.4, 2.6.19.5, 2.6.19.6, 2.6.19.7, 2.6.20.16, 2.6.20.17, 2.6.20.18, 2.6.20.19, 2.6.20.20, 2.6.20.21, 2.6.21.5, 2.6.21.6, 2.6.21.7, 2.6.22, 2.6.22.1, 2.6.22.2, 2.6.22.8, 2.6.22.9, 2.6.22.10, 2.6.22.11, 2.6.22.12, 2.6.22.13, 2.6.22.14, 2.6.22.15, 2.6.22.17, 2.6.22.18, 2.6.22.19, 2.6.22.20, 2.6.22.21, 2.6.22.22, 2.6.22_rc1, 2.6.22_rc7, 2.6.23, 2.6.23.8, 2.6.23.9, 2.6.23.10, 2.6.23.11, 2.6.23.12, 2.6.23.13, 2.6.23.15, 2.6.23.16, 2.6.23.17, 2.6.23_rc1, 2.6.24, 2.6.24.1, 2.6.24.2, 2.6.24.3, 2.6.24.4, 2.6.24.5, 2.6.24.6, 2.6.24.7, 2.6.24_rc1, 2.6.24_rc4, 2.6.24_rc5, 2.6.25, 2.6.25.1, 2.6.25.2, 2.6.25.3, 2.6.25.4, 2.6.25.5, 2.6.25.6, 2.6.25.7, 2.6.25.8, 2.6.25.9, 2.6.25.10, 2.6.25.11, 2.6.25.12, 2.6.25.13, 2.6.25.14, 2.6.25.15, 2.6.25.16, 2.6.25.17, 2.6.26, 2.6.26.1, 2.6.26.2, 2.6.26.3, 2.6.26.4, 2.6.26.5, 2.6.26.6, 2.6.26.7, 2.6.26.8, 2.6.27, 2.6.27.1, 2.6.27.2, 2.6.27.3, 2.6.27.4, 2.6.27.5, 2.6.27.6, 2.6.27.7—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.