Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.9

Linux kernel can be slowed down by memory exhaustion

CVE-2008-2372 · published 18 years ago
Summary

The Linux kernel versions 2.6.24 and 2.6.25 (up to 2.6.25.8) can let a local user consume large amounts of memory by repeatedly calling a specific function. This can cause the system to run out of memory and become unresponsive. Update the kernel to a newer version or apply the provided patches to stop the uncontrolled memory allocation.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
linux linux_kernel 2.6.24
2.6.25
2.6.25.1
2.6.25.2
2.6.25.3
2.6.25.4
2.6.25.5
2.6.25.6
2.6.25.7
2.6.25.8
cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*
Original advisory text
The Linux kernel 2.6.24 and 2.6.25 before 2.6.25.9 allows local users to cause a denial of service (memory consumption) via a large number of calls to the get_user_pages function, which lacks a ZER...
The Linux kernel 2.6.24 and 2.6.25 before 2.6.25.9 allows local users to cause a denial of service (memory consumption) via a large number of calls to the get_user_pages function, which lacks a ZERO_PAGE optimization and results in allocation of "useless newly zeroed pages."
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
4.9 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-20Improper Input Validation
Timeline
Published2 Jul 2008
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2008-2372 · NVD
Track software like this
Free during beta