CVE-2008-3915
Buffer overflow in nfsd in the Linux kernel before 2.6.26.4, when NFSv4 is enabled, allows remote...
9.3 High
Buffer overflow in nfsd in the Linux kernel before 2.6.26.4, when NFSv4 is enabled, allows remote attackers to have an unknown impact via vectors related to decoding an NFSv4 acl.
Exploit likelihood
4.35%Up 0.9 points since Feb 4, 2022
What each source reports
NVD Score used
Buffer overflow in nfsd in the Linux kernel before 2.6.26.4, when NFSv4 is enabled, allows remote attackers to have an unknown impact via vectors related to decoding an NFSv4 acl.
- Record
CVE-2008-3915- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in nfsd in the Linux kernel before 2.6.26.4, when NFSv4 is enabled, allows remote attackers to have an unknown impact via vectors related to decoding an NFSv4 acl.
- Record
CVE-2008-3915- Updated
- 2026-11-02
EUVDEUVD-2008-3900 No score
Buffer overflow in nfsd in the Linux kernel before 2.6.26.4, when NFSv4 is enabled, allows remote attackers to have an unknown impact via vectors related to decoding an NFSv4 acl.
- Record
EUVD-2008-3900- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6x74-h8w8-x4pj No score
Buffer overflow in nfsd in the Linux kernel before 2.6.26.4, when NFSv4 is enabled, allows remote...
Buffer overflow in nfsd in the Linux kernel before 2.6.26.4, when NFSv4 is enabled, allows remote attackers to have an unknown impact via vectors related to decoding an NFSv4 acl.
- Record
GHSA-6x74-h8w8-x4pj- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVBELL-CVE-2008-3915
CVE-2008-3915 does not affect BellSoft software
- Record
BELL-CVE-2008-3915- CVSS 2.0
- 9.3 Critical
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linux-2.6.24Debian:4.0 From an advisory covering 8 CVEs |
before 2.6.24-6~etchnhalf.5, plus listed versions 2.6.24-5~etchnhalf.12.6.24-6~etchnhalf.12.6.24-6~etchnhalf.22.6.24-6~etchnhalf.32.6.24-6~etchnhalf.4 |
2.6.24-6~etchnhalf.5 |
kernel-rtRed Hat:enterprise_mrg:1::el5 From an advisory covering 10 CVEs |
before 0:2.6.24.7-81.el5rt | 0:2.6.24.7-81.el5rt |
kernel-rt-debugRed Hat:enterprise_mrg:1::el5 From an advisory covering 10 CVEs |
before 0:2.6.24.7-81.el5rt | 0:2.6.24.7-81.el5rt |
kernel-rt-debug-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 10 CVEs |
before 0:2.6.24.7-81.el5rt | 0:2.6.24.7-81.el5rt |
kernel-rt-debug-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 10 CVEs |
before 0:2.6.24.7-81.el5rt | 0:2.6.24.7-81.el5rt |
kernel-rt-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 10 CVEs |
before 0:2.6.24.7-81.el5rt | 0:2.6.24.7-81.el5rt |
kernel-rt-debuginfo-commonRed Hat:enterprise_mrg:1::el5 From an advisory covering 10 CVEs |
before 0:2.6.24.7-81.el5rt | 0:2.6.24.7-81.el5rt |
kernel-rt-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 10 CVEs |
before 0:2.6.24.7-81.el5rt | 0:2.6.24.7-81.el5rt |
kernel-rt-docRed Hat:enterprise_mrg:1::el5 From an advisory covering 10 CVEs |
before 0:2.6.24.7-81.el5rt | 0:2.6.24.7-81.el5rt |
kernel-rt-traceRed Hat:enterprise_mrg:1::el5 From an advisory covering 10 CVEs |
before 0:2.6.24.7-81.el5rt | 0:2.6.24.7-81.el5rt |
Show 5 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-rt-trace-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 10 CVEs |
before 0:2.6.24.7-81.el5rt | 0:2.6.24.7-81.el5rt |
kernel-rt-trace-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 10 CVEs |
before 0:2.6.24.7-81.el5rt | 0:2.6.24.7-81.el5rt |
kernel-rt-vanillaRed Hat:enterprise_mrg:1::el5 From an advisory covering 10 CVEs |
before 0:2.6.24.7-81.el5rt | 0:2.6.24.7-81.el5rt |
kernel-rt-vanilla-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 10 CVEs |
before 0:2.6.24.7-81.el5rt | 0:2.6.24.7-81.el5rt |
kernel-rt-vanilla-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 10 CVEs |
before 0:2.6.24.7-81.el5rt | 0:2.6.24.7-81.el5rt |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-3915 is a high vulnerability (CVSS 9.3) in Linux Kernel, published September 9, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.35%, the 91st percentile. No source names a fixed version.
References
openwall.com/lists/oss-security/2008/09/04/4
secunia.com/advisories/32190
debian.org/security/2008/dsa-1636
Show 74 moreShow less
ubuntu.com/usn/usn-659-1
lkml.org/lkml/2008/9/3/286
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=91b80969ba466ba4b915a4a1d03add8c297add3f
redhat.com/support/errata/RHSA-2008-0857.html
kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.4
securityfocus.com/bid/31133
bugzilla.redhat.com/show_bug.cgi?id=461101
exchange.xforce.ibmcloud.com/vulnerabilities/45055
nvd.nist.gov/vuln/detail/CVE-2008-3915
github.com/advisories/GHSA-6x74-h8w8-x4pj
docs.bell-sw.com/security/cves/CVE-2008-3915
access.redhat.com/errata/RHSA-2008:0857
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0857.json
cve.org/CVERecord?id=CVE-2008-3272