VYPR
High severity7.8NVD Advisory· Published Jul 9, 2008· Updated Apr 23, 2026

CVE-2008-2812

CVE-2008-2812

Description

The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in (1) hamradio/6pack.c, (2) hamradio/mkiss.c, (3) irda/irtty-sir.c, (4) ppp_async.c, (5) ppp_synctty.c, (6) slip.c, (7) wan/x25_asy.c, and (8) wireless/strip.c in drivers/net/.

Affected products

22
  • cpe:2.3:a:avaya:communication_manager:*:*:*:*:*:*:*:*
    Range: >=3.1
  • cpe:2.3:a:avaya:expanded_meet-me_conferencing:*:*:*:*:*:*:*:*
  • cpe:2.3:a:avaya:intuity_audix_lx:2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:avaya:meeting_exchange:5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:avaya:message_networking:3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:avaya:messaging_storage_server:4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:avaya:proactive_contact:4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:avaya:sip_enablement_services:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:avaya:sip_enablement_services:-:*:*:*:*:*:*:*
    • cpe:2.3:a:avaya:sip_enablement_services:4.0:*:*:*:*:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*+ 3 more
    • cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*
  • cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
    Range: <2.6.25.10
  • cpe:2.3:o:novell:linux_desktop:9:*:*:*:*:*:*:*
  • OpenSUSE/openSUSE2 versions
    cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*
    • cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*
  • cpe:2.3:o:suse:suse_linux_enterprise_desktop:10:sp1:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:suse:suse_linux_enterprise_desktop:10:sp1:*:*:*:*:*:*
    • cpe:2.3:o:suse:suse_linux_enterprise_desktop:10:sp2:*:*:*:*:*:*
  • cpe:2.3:o:suse:suse_linux_enterprise_server:10:sp1:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:suse:suse_linux_enterprise_server:10:sp1:*:*:*:*:*:*
    • cpe:2.3:o:suse:suse_linux_enterprise_server:10:sp2:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

32

News mentions

0

No linked articles in our index yet.