CVE-2008-2372
The Linux kernel 2.6.24 and 2.6.25 before 2.6.25.9 allows local users to cause a denial of...
4.9 Medium
The Linux kernel 2.6.24 and 2.6.25 before 2.6.25.9 allows local users to cause a denial of service (memory consumption) via a large number of calls to the get_user_pages function, which lacks a ZERO_PAGE optimization and results in allocation of "useless newly zeroed pages."
Exploit likelihood
0.39%Down 1.2 points since Feb 4, 2022
What each source reports
NVD Score used
The Linux kernel 2.6.24 and 2.6.25 before 2.6.25.9 allows local users to cause a denial of service (memory consumption) via a large number of calls to the get_user_pages function, which lacks a ZERO_PAGE optimization and results in allocation of "useless newly zeroed pages."
- Record
CVE-2008-2372- CVSS 2.0
- 4.9 Medium
AV:L/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The Linux kernel 2.6.24 and 2.6.25 before 2.6.25.9 allows local users to cause a denial of service (memory consumption) via a large number of calls to the get_user_pages function, which lacks a ZERO_PAGE optimization and results in allocation of "useless newly zeroed pages."
- Record
CVE-2008-2372- Updated
- 2026-11-02
EUVDEUVD-2008-2367 No score
The Linux kernel 2.6.24 and 2.6.25 before 2.6.25.9 allows local users to cause a denial of service (memory consumption) via a large number of calls to the get_user_pages function, which lacks a ZERO_PAGE optimization and results in allocation of "useless newly zeroed pages."
- Record
EUVD-2008-2367- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q4m2-jww9-j4j3 No score
The Linux kernel 2.6.24 and 2.6.25 before 2.6.25.9 allows local users to cause a denial of...
The Linux kernel 2.6.24 and 2.6.25 before 2.6.25.9 allows local users to cause a denial of service (memory consumption) via a large number of calls to the get_user_pages function, which lacks a ZERO_PAGE optimization and results in allocation of "useless newly zeroed pages."
- Record
GHSA-q4m2-jww9-j4j3- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-rtRed Hat:enterprise_mrg:1::el5 From an advisory covering 9 CVEs |
before 0:2.6.24.7-74.el5rt | 0:2.6.24.7-74.el5rt |
kernel-rt-debugRed Hat:enterprise_mrg:1::el5 From an advisory covering 9 CVEs |
before 0:2.6.24.7-74.el5rt | 0:2.6.24.7-74.el5rt |
kernel-rt-debug-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 9 CVEs |
before 0:2.6.24.7-74.el5rt | 0:2.6.24.7-74.el5rt |
kernel-rt-debug-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 9 CVEs |
before 0:2.6.24.7-74.el5rt | 0:2.6.24.7-74.el5rt |
kernel-rt-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 9 CVEs |
before 0:2.6.24.7-74.el5rt | 0:2.6.24.7-74.el5rt |
kernel-rt-debuginfo-commonRed Hat:enterprise_mrg:1::el5 From an advisory covering 9 CVEs |
before 0:2.6.24.7-74.el5rt | 0:2.6.24.7-74.el5rt |
kernel-rt-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 9 CVEs |
before 0:2.6.24.7-74.el5rt | 0:2.6.24.7-74.el5rt |
kernel-rt-docRed Hat:enterprise_mrg:1::el5 From an advisory covering 9 CVEs |
before 0:2.6.24.7-74.el5rt | 0:2.6.24.7-74.el5rt |
kernel-rt-traceRed Hat:enterprise_mrg:1::el5 From an advisory covering 9 CVEs |
before 0:2.6.24.7-74.el5rt | 0:2.6.24.7-74.el5rt |
kernel-rt-trace-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 9 CVEs |
before 0:2.6.24.7-74.el5rt | 0:2.6.24.7-74.el5rt |
Show 37 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-rt-trace-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 9 CVEs |
before 0:2.6.24.7-74.el5rt | 0:2.6.24.7-74.el5rt |
kernel-rt-vanillaRed Hat:enterprise_mrg:1::el5 From an advisory covering 9 CVEs |
before 0:2.6.24.7-74.el5rt | 0:2.6.24.7-74.el5rt |
kernel-rt-vanilla-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 9 CVEs |
before 0:2.6.24.7-74.el5rt | 0:2.6.24.7-74.el5rt |
kernel-rt-vanilla-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 9 CVEs |
before 0:2.6.24.7-74.el5rt | 0:2.6.24.7-74.el5rt |
kernelRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-PAERed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-debugRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-develRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-docRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-headersRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-xenRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernelRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-PAERed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-debugRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-develRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-docRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-headersRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-kdumpRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-kdump-develRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-xenRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-2372 is a medium vulnerability (CVSS 4.9) in Linux Kernel, published July 2, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. No source names a fixed version.
References
wiki.rpath.com/wiki/Advisories:rPSA-2008-0207
secunia.com/advisories/32485
lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html
ussg.iu.edu/hypermail/linux/kernel/0804.3/3203.html
Show 115 moreShow less
redhat.com/support/errata/RHSA-2008-0957.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9383
ubuntu.com/usn/usn-659-1
new-ubuntu-news.blogspot.com/2008/06/re-pending-stable-kernel-security_25.html
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=89f5b7da2a6bad2e84670422ab8192382a5aeb9f
kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.9
issues.rpath.com/browse/RPL-2629
exchange.xforce.ibmcloud.com/vulnerabilities/43550
nvd.nist.gov/vuln/detail/CVE-2008-2372
github.com/advisories/GHSA-q4m2-jww9-j4j3
access.redhat.com/errata/RHSA-2008:0585
bugzilla.redhat.com/show_bug.cgi?id=404291
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0585.json
cve.org/CVERecord?id=CVE-2007-5966