CVE-2008-0001
VFS in the Linux kernel before 2.6.22.16, and 2.6.23.x before 2.6.23.14, performs tests of access...
VFS in the Linux kernel before 2.6.22.16, and 2.6.23.x before 2.6.23.14, performs tests of access mode by using the flag variable instead of the acc_mode variable, which might allow local users to bypass intended permissions and remove directories.
Exploit likelihood
What each source reports
NVD Score used
3.6
VFS in the Linux kernel before 2.6.22.16, and 2.6.23.x before 2.6.23.14, performs tests of access mode by using the flag variable instead of the acc_mode variable, which might allow local users to bypass intended permissions and remove directories.
- Record
CVE-2008-0001- CVSS 2.0
- 3.6 Low
AV:L/AC:L/Au:N/C:N/I:P/A:P - Updated
- 2026-11-02
CVE List No score
VFS in the Linux kernel before 2.6.22.16, and 2.6.23.x before 2.6.23.14, performs tests of access mode by using the flag variable instead of the acc_mode variable, which might allow local users to bypass intended permissions and remove directories.
- Record
CVE-2008-0001- Updated
- 2026-11-02
EUVDEUVD-2008-0015 No score
VFS in the Linux kernel before 2.6.22.16, and 2.6.23.x before 2.6.23.14, performs tests of access mode by using the flag variable instead of the acc_mode variable, which might allow local users to bypass intended permissions and remove directories.
- Record
EUVD-2008-0015- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w48m-wgg4-pf34 No score
VFS in the Linux kernel before 2.6.22.16, and 2.6.23.x before 2.6.23.14, performs tests of access...
VFS in the Linux kernel before 2.6.22.16, and 2.6.23.x before 2.6.23.14, performs tests of access mode by using the flag variable instead of the acc_mode variable, which might allow local users to bypass intended permissions and remove directories.
- Record
GHSA-w48m-wgg4-pf34- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linux-2.6Debian:4.0 |
before 2.6.18.dfsg.1-17etch1, plus listed versions 2.6.18.dfsg.1-122.6.18.dfsg.1-12etch12.6.18.dfsg.1-12etch22.6.18.dfsg.1-132.6.18.dfsg.1-13etch1 Show 10 moreShow less2.6.18.dfsg.1-13etch22.6.18.dfsg.1-13etch32.6.18.dfsg.1-13etch42.6.18.dfsg.1-13etch52.6.18.dfsg.1-13etch62.6.18.dfsg.1-13lenny12.6.18.dfsg.1-142.6.18.dfsg.1-152.6.18.dfsg.1-162.6.18.dfsg.1-17 |
2.6.18.dfsg.1-17etch1 |
kernelRed Hat:enterprise_linux:4::as |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::as |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-develRed Hat:enterprise_linux:4::as |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-docRed Hat:enterprise_linux:4::as |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-hugememRed Hat:enterprise_linux:4::as |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::as |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-largesmpRed Hat:enterprise_linux:4::as |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::as |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-smpRed Hat:enterprise_linux:4::as |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
Show 72 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-smp-develRed Hat:enterprise_linux:4::as |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-xenURed Hat:enterprise_linux:4::as |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::as |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernelRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-develRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-docRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-hugememRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-largesmpRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-smpRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-smp-develRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-xenURed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernelRed Hat:enterprise_linux:4::es |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::es |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-develRed Hat:enterprise_linux:4::es |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-docRed Hat:enterprise_linux:4::es |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-hugememRed Hat:enterprise_linux:4::es |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::es |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-largesmpRed Hat:enterprise_linux:4::es |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::es |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-smpRed Hat:enterprise_linux:4::es |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-smp-develRed Hat:enterprise_linux:4::es |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-xenURed Hat:enterprise_linux:4::es |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::es |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernelRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-develRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-docRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-hugememRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-largesmpRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-smpRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-smp-develRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-xenURed Hat:enterprise_linux:4::ws |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernelRed Hat:enterprise_linux:5::client |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-PAERed Hat:enterprise_linux:5::client |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::client |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-debugRed Hat:enterprise_linux:5::client |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::client |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::client |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-develRed Hat:enterprise_linux:5::client |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-docRed Hat:enterprise_linux:5::client |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-headersRed Hat:enterprise_linux:5::client |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-xenRed Hat:enterprise_linux:5::client |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::client |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernelRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-PAERed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-debugRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-docRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-headersRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-kdumpRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-kdump-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-xenRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-0001 is a low vulnerability (CVSS 3.6) in Linux Kernel, published January 15, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. Fixed in linux-2.6 2.6.18.dfsg.1-17etch1.
References
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=974a9f0b47da74e28f68b9c8645c3786aa5ace1a
kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.16
vupen.com/english/advisories/2008/0151
secunia.com/advisories/28806
secunia.com/advisories/28643
secunia.com/advisories/28628
Show 80 moreShow less
kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.14
secunia.com/advisories/28485
securityfocus.com/archive/1/486485/100/0/threaded
wiki.rpath.com/wiki/Advisories:rPSA-2008-0021
secunia.com/advisories/28706
secunia.com/advisories/28626
debian.org/security/2008/dsa-1479
mandriva.com/security/advisories?name=MDVSA-2008:112
secunia.com/advisories/28558
lists.opensuse.org/opensuse-security-announce/2008-03/msg00002.html
issues.rpath.com/browse/RPL-2146
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9709
mandriva.com/security/advisories?name=MDVSA-2008:044
secunia.com/advisories/29245
secunia.com/advisories/28664
securitytracker.com/id?1019289
lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html
secunia.com/advisories/28748
ubuntu.com/usn/usn-574-1
exchange.xforce.ibmcloud.com/vulnerabilities/39672
redhat.com/archives/fedora-package-announce/2008-January/msg00828.html
secunia.com/advisories/28971
redhat.com/support/errata/RHSA-2008-0089.html
ubuntu.com/usn/usn-578-1
securityfocus.com/bid/27280
rhn.redhat.com/errata/RHSA-2008-0055.html
nvd.nist.gov/vuln/detail/CVE-2008-0001
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=974a9f0b47da74e28f68b9c8645c3786aa5ace1a
github.com/advisories/GHSA-w48m-wgg4-pf34
access.redhat.com/errata/RHSA-2008:0055
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=179665
bugzilla.redhat.com/show_bug.cgi?id=382161
bugzilla.redhat.com/show_bug.cgi?id=392101
bugzilla.redhat.com/show_bug.cgi?id=396751
bugzilla.redhat.com/show_bug.cgi?id=396861
bugzilla.redhat.com/show_bug.cgi?id=425111
bugzilla.redhat.com/show_bug.cgi?id=428637
bugzilla.redhat.com/show_bug.cgi?id=428791
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0055.json
access.redhat.com/security/cve/CVE-2007-4130
cve.org/CVERecord?id=CVE-2007-4130
nvd.nist.gov/vuln/detail/CVE-2007-4130
access.redhat.com/security/cve/CVE-2007-5500
cve.org/CVERecord?id=CVE-2007-5500
nvd.nist.gov/vuln/detail/CVE-2007-5500
access.redhat.com/security/cve/CVE-2007-6063
cve.org/CVERecord?id=CVE-2007-6063
nvd.nist.gov/vuln/detail/CVE-2007-6063
access.redhat.com/security/cve/CVE-2007-6151
cve.org/CVERecord?id=CVE-2007-6151
nvd.nist.gov/vuln/detail/CVE-2007-6151
access.redhat.com/security/cve/CVE-2007-6206
cve.org/CVERecord?id=CVE-2007-6206
nvd.nist.gov/vuln/detail/CVE-2007-6206
access.redhat.com/security/cve/CVE-2007-6694
cve.org/CVERecord?id=CVE-2007-6694
nvd.nist.gov/vuln/detail/CVE-2007-6694
access.redhat.com/security/cve/CVE-2008-0001
cve.org/CVERecord?id=CVE-2008-0001
access.redhat.com/errata/RHSA-2008:0089
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=245777
bugzilla.redhat.com/show_bug.cgi?id=372701
bugzilla.redhat.com/show_bug.cgi?id=412091
bugzilla.redhat.com/show_bug.cgi?id=414041
bugzilla.redhat.com/show_bug.cgi?id=424181
bugzilla.redhat.com/show_bug.cgi?id=425381
bugzilla.redhat.com/show_bug.cgi?id=426289
bugzilla.redhat.com/show_bug.cgi?id=427994
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0089.json
access.redhat.com/security/cve/CVE-2007-3104
cve.org/CVERecord?id=CVE-2007-3104
nvd.nist.gov/vuln/detail/CVE-2007-3104
access.redhat.com/security/cve/CVE-2007-5904
cve.org/CVERecord?id=CVE-2007-5904
nvd.nist.gov/vuln/detail/CVE-2007-5904
access.redhat.com/security/cve/CVE-2007-6416
cve.org/CVERecord?id=CVE-2007-6416
nvd.nist.gov/vuln/detail/CVE-2007-6416