CVE-2008-0001
VFS in the Linux kernel before 2.6.22.16, and 2.6.23.x before 2.6.23.14, performs tests of access...
3.6 Low
VFS in the Linux kernel before 2.6.22.16, and 2.6.23.x before 2.6.23.14, performs tests of access mode by using the flag variable instead of the acc_mode variable, which might allow local users to bypass intended permissions and remove directories.
Exploit likelihood
0.39%Down 1.2 points since Feb 4, 2022
What each source reports
NVD Score used
VFS in the Linux kernel before 2.6.22.16, and 2.6.23.x before 2.6.23.14, performs tests of access mode by using the flag variable instead of the acc_mode variable, which might allow local users to bypass intended permissions and remove directories.
- Record
CVE-2008-0001- CVSS 2.0
- 3.6 Low
AV:L/AC:L/Au:N/C:N/I:P/A:P - Updated
- 2026-11-02
CVE List No score
VFS in the Linux kernel before 2.6.22.16, and 2.6.23.x before 2.6.23.14, performs tests of access mode by using the flag variable instead of the acc_mode variable, which might allow local users to bypass intended permissions and remove directories.
- Record
CVE-2008-0001- Updated
- 2026-11-02
EUVDEUVD-2008-0015 No score
VFS in the Linux kernel before 2.6.22.16, and 2.6.23.x before 2.6.23.14, performs tests of access mode by using the flag variable instead of the acc_mode variable, which might allow local users to bypass intended permissions and remove directories.
- Record
EUVD-2008-0015- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w48m-wgg4-pf34 No score
VFS in the Linux kernel before 2.6.22.16, and 2.6.23.x before 2.6.23.14, performs tests of access...
VFS in the Linux kernel before 2.6.22.16, and 2.6.23.x before 2.6.23.14, performs tests of access mode by using the flag variable instead of the acc_mode variable, which might allow local users to bypass intended permissions and remove directories.
- Record
GHSA-w48m-wgg4-pf34- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linux-2.6Debian:4.0 From an advisory covering 4 CVEs |
before 2.6.18.dfsg.1-17etch1, plus listed versions 2.6.18.dfsg.1-122.6.18.dfsg.1-12etch12.6.18.dfsg.1-12etch22.6.18.dfsg.1-132.6.18.dfsg.1-13etch1 Show 10 moreShow less2.6.18.dfsg.1-13etch22.6.18.dfsg.1-13etch32.6.18.dfsg.1-13etch42.6.18.dfsg.1-13etch52.6.18.dfsg.1-13etch62.6.18.dfsg.1-13lenny12.6.18.dfsg.1-142.6.18.dfsg.1-152.6.18.dfsg.1-162.6.18.dfsg.1-17 |
2.6.18.dfsg.1-17etch1 |
kernelRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-develRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-docRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-hugememRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-largesmpRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-smpRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
Show 72 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-smp-develRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-xenURed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernelRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-develRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-docRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-hugememRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-largesmpRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-smpRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-smp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-xenURed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernelRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-develRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-docRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-hugememRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-largesmpRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-smpRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-smp-develRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-xenURed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernelRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-develRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-docRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-hugememRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-largesmpRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-smpRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-smp-develRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-xenURed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:2.6.9-67.0.4.EL | 0:2.6.9-67.0.4.EL |
kernelRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-PAERed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-debugRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-develRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-docRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-headersRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-xenRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernelRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-PAERed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-debugRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-develRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-docRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-headersRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-kdumpRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-kdump-develRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-xenRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.6.el5 | 0:2.6.18-53.1.6.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-0001 is a low vulnerability (CVSS 3.6) in Linux Kernel, published January 15, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. No source names a fixed version.
References
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=974a9f0b47da74e28f68b9c8645c3786aa5ace1a
kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.16
vupen.com/english/advisories/2008/0151
secunia.com/advisories/28806
Show 80 moreShow less
kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.14
securityfocus.com/archive/1/486485/100/0/threaded
wiki.rpath.com/wiki/Advisories:rPSA-2008-0021
debian.org/security/2008/dsa-1479
mandriva.com/security/advisories?name=MDVSA-2008:112
lists.opensuse.org/opensuse-security-announce/2008-03/msg00002.html
issues.rpath.com/browse/RPL-2146
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9709
securitytracker.com/id?1019289
ubuntu.com/usn/usn-574-1
exchange.xforce.ibmcloud.com/vulnerabilities/39672
redhat.com/archives/fedora-package-announce/2008-January/msg00828.html
rhn.redhat.com/errata/RHSA-2008-0055.html
nvd.nist.gov/vuln/detail/CVE-2008-0001
github.com/advisories/GHSA-w48m-wgg4-pf34
access.redhat.com/errata/RHSA-2008:0055
bugzilla.redhat.com/show_bug.cgi?id=179665
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0055.json
cve.org/CVERecord?id=CVE-2007-4130