CVE-2008-4554
linux linux kernel: no CVSS score yet. EPSS 0.4% chance of exploitation in the next 30 days.
The do_splice_from function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have the O_APPEND flag set, which allows local users to bypass append mode and make arbitrary changes to other locations in the file.
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- linux:linux_kernel
References
- http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=efc968d450e013049a662d22727cf132618dcb2f
- http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html
- http://secunia.com/advisories/32386
- http://secunia.com/advisories/32918
- http://secunia.com/advisories/32998