Every CVESearch/Get API key

CVE-2008-3527

arch/i386/kernel/sysenter.c in the Virtual Dynamic Shared Objects (vDSO) implementation in the...

4.6 Medium

CVE-2008-3527 is a medium vulnerability (CVSS 4.6) in Linux Kernel, published November 5, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. No source names a fixed version.

What does this mean?
Severity
4.6 MediumCVSS 2.0, NVD
Exploit chance
0.38%EPSS, 32nd percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

arch/i386/kernel/sysenter.c in the Virtual Dynamic Shared Objects (vDSO) implementation in the Linux kernel before 2.6.21 does not properly check boundaries, which allows local users to gain privileges or cause a denial of service via unspecified vectors, related to the install_special_mapping, syscall, and syscall32_nopage functions.

Exploit likelihood

0.38%Down 0.9 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
fai-kernels
Debian:4.0
From an advisory covering 11 CVEs
before 1.17+etch.23etch1, plus listed versions
1.171.17+etch.13etch31.17+etch.13etch41.17+etch.13etch51.17+etch.13etch6
Show 20 moreShow less
1.17+etch.161.17+etch.171.17+etch.17etch11.17+etch.18etch11.17+etch.18etch21.17+etch.18etch31.17+etch.18etch41.17+etch.18etch51.17+etch.18etch61.17+etch.211.17+etch.22etch11.17+etch.22etch21.17+etch.22etch31.17+etch.231.17+etch11.17+etch21.17+etch31.17+etch41.17+etch51.17etch1
1.17+etch.23etch1
linux-2.6
Debian:4.0
From an advisory covering 11 CVEs
before 2.6.18.dfsg.1-23etch1, plus listed versions
2.6.18.dfsg.1-122.6.18.dfsg.1-12etch12.6.18.dfsg.1-12etch22.6.18.dfsg.1-132.6.18.dfsg.1-13etch1
Show 25 moreShow less
2.6.18.dfsg.1-13etch22.6.18.dfsg.1-13etch32.6.18.dfsg.1-13etch42.6.18.dfsg.1-13etch52.6.18.dfsg.1-13etch62.6.18.dfsg.1-13lenny12.6.18.dfsg.1-142.6.18.dfsg.1-152.6.18.dfsg.1-162.6.18.dfsg.1-172.6.18.dfsg.1-17etch12.6.18.dfsg.1-182.6.18.dfsg.1-18etch12.6.18.dfsg.1-18etch32.6.18.dfsg.1-18etch42.6.18.dfsg.1-18etch52.6.18.dfsg.1-18etch62.6.18.dfsg.1-192.6.18.dfsg.1-202.6.18.dfsg.1-212.6.18.dfsg.1-222.6.18.dfsg.1-22etch12.6.18.dfsg.1-22etch22.6.18.dfsg.1-22etch32.6.18.dfsg.1-23
2.6.18.dfsg.1-23etch1
user-mode-linux
Debian:4.0
From an advisory covering 11 CVEs
before 2.6.18-1um-2etch.23etch1, plus listed versions
2.6.18-1um-22.6.18-1um-2etch.13etch32.6.18-1um-2etch.13etch42.6.18-1um-2etch.13etch52.6.18-1um-2etch.13etch6
Show 18 moreShow less
2.6.18-1um-2etch.162.6.18-1um-2etch.172.6.18-1um-2etch.17etch12.6.18-1um-2etch.18etch12.6.18-1um-2etch.18etch22.6.18-1um-2etch.18etch32.6.18-1um-2etch.18etch42.6.18-1um-2etch.18etch52.6.18-1um-2etch.18etch62.6.18-1um-2etch.212.6.18-1um-2etch.22etch12.6.18-1um-2etch.22etch22.6.18-1um-2etch.22etch32.6.18-1um-2etch.232.6.18-1um-2etch12.6.18-1um-2etch22.6.18-1um-2etch32.6.18-1um-2etch4
2.6.18-1um-2etch.23etch1
kernel
Red Hat:enterprise_linux:5::client
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
kernel-PAE
Red Hat:enterprise_linux:5::client
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
kernel-PAE-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
kernel-PAE-devel
Red Hat:enterprise_linux:5::client
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
kernel-debug
Red Hat:enterprise_linux:5::client
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
kernel-debug-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
kernel-debug-devel
Red Hat:enterprise_linux:5::client
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
Show 26 moreShow less
Affected packages
PackageAffectedFixed
kernel-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
kernel-debuginfo-common
Red Hat:enterprise_linux:5::client
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
kernel-devel
Red Hat:enterprise_linux:5::client
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
kernel-doc
Red Hat:enterprise_linux:5::client
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
kernel-headers
Red Hat:enterprise_linux:5::client
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
kernel-xen
Red Hat:enterprise_linux:5::client
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
kernel-xen-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
kernel-xen-devel
Red Hat:enterprise_linux:5::client
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
kernel
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
kernel-PAE
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
kernel-PAE-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
kernel-PAE-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
kernel-debug
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
kernel-debug-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
kernel-debug-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
kernel-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
kernel-debuginfo-common
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
kernel-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
kernel-doc
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
kernel-headers
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
kernel-kdump
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
kernel-kdump-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
kernel-kdump-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
kernel-xen
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
kernel-xen-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5
kernel-xen-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 8 CVEs
before 0:2.6.18-92.1.18.el5
0:2.6.18-92.1.18.el5

What each source reports

NVD Score used4.6

arch/i386/kernel/sysenter.c in the Virtual Dynamic Shared Objects (vDSO) implementation in the Linux kernel before 2.6.21 does not properly check boundaries, which allows local users to gain privileges or cause a denial of service via unspecified vectors, related to the install_special_mapping, syscall, and syscall32_nopage functions.

Record
CVE-2008-3527
CVSS 2.0
4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-264
Updated
2026-11-02
CVE ListNo score

arch/i386/kernel/sysenter.c in the Virtual Dynamic Shared Objects (vDSO) implementation in the Linux kernel before 2.6.21 does not properly check boundaries, which allows local users to gain privileges or cause a denial of service via unspecified vectors, related to the install_special_mapping, syscall, and syscall32_nopage functions.

Record
CVE-2008-3527
Updated
2026-11-02
EUVDEUVD-2008-3513No score

arch/i386/kernel/sysenter.c in the Virtual Dynamic Shared Objects (vDSO) implementation in the Linux kernel before 2.6.21 does not properly check boundaries, which allows local users to gain privileges or cause a denial of service via unspecified vectors, related to the install_special_mapping, syscall, and syscall32_nopage functions.

Record
EUVD-2008-3513
Updated
2026-11-03
GitHub AdvisoriesGHSA-26wc-fvf8-2rgqNo score

arch/i386/kernel/sysenter.c in the Virtual Dynamic Shared Objects (vDSO) implementation in the...

arch/i386/kernel/sysenter.c in the Virtual Dynamic Shared Objects (vDSO) implementation in the Linux kernel before 2.6.21 does not properly check boundaries, which allows local users to gain privileges or cause a denial of service via unspecified vectors, related to the install_special_mapping, syscall, and syscall32_nopage functions.

Record
GHSA-26wc-fvf8-2rgq
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 59 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open