CVE-2008-1675 — CVE-2008-1675 kernel: [netdrvr] tehuti: move ioctl perm check closer to function start

Back Back to CVE browser

HIGH

CVE-2008-1675 kernel: [netdrvr] tehuti: move ioctl perm check closer to function start

Published May 2, 2008

7.2

HIGH

CVSS 2.0

EPSS 0.53%

Description

The bdx_ioctl_priv function in the tehuti driver (tehuti.c) in Linux kernel 2.6.x before 2.6.25.1 does not properly check certain information related to register size, which has unspecified impact and local attack vectors, probably related to reading or writing kernel memory.

Affected products

Remediation

Red Hat statement

Not vulnerable. This issue did not affect versions of the Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.

Metrics

0.53% 0.00527

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00527

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (10 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.53% (0.00527)	42.55th	v5 (v2026.06.15)
Jun 15, 2026	0.53% (0.00527)	40.22th	v5 (v2026.06.15)
Mar 17, 2025	0.09% (0.00092)	23.96th	v4 (v2025.03.14)
Dec 12, 2024	0.11% (0.00115)	46.91th	v3 (v2023.03.01)
Jul 10, 2024	0.11% (0.00115)	45.69th	v3 (v2023.03.01)
Mar 7, 2023	0.11% (0.00115)	43.64th	v3 (v2023.03.01)
Mar 6, 2023	1.55% (0.01547)	74.98th	v2 (v2022.01.01)
Feb 23, 2023	1.55% (0.01547)	74.94th	v2 (v2022.01.01)
Apr 1, 2022	1.55% (0.01547)	72.92th	v2 (v2022.01.01)
Feb 4, 2022	1.55% (0.01547)	51.82th	v2 (v2022.01.01)

Weaknesses (1)

CWE-399

References (25)

http://marc.info/?l=linux-kernel&m=120949204519706&w=2
mailing-listx_refsource_MLISTExploit
http://marc.info/?l=linux-kernel&m=120949204619718&w=2
mailing-listx_refsource_MLISTExploit
http://marc.info/?l=linux-kernel&m=120949582428998&w=2
mailing-listx_refsource_MLISTExploit
http://secunia.com/advisories/30017
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/30044
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/30260
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/30515
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://wiki.rpath.com/Advisories:rPSA-2008-0157
x_refsource_CONFIRM
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0157
x_refsource_CONFIRM
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.1
x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=MDVSA-2008:109
vendor-advisoryx_refsource_MANDRIVA
http://www.mandriva.com/security/advisories?name=MDVSA-2008:167
vendor-advisoryx_refsource_MANDRIVA
http://www.securityfocus.com/archive/1/491566/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/491732/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/29014
vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1019960
vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2008/1406/references
vdb-entryx_refsource_VUPENVendor Advisory
https://access.redhat.com/security/cve/CVE-2008-1675
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=444416
Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/42132
vdb-entryx_refsource_XF
https://issues.rpath.com/browse/RPL-2501
x_refsource_CONFIRM
https://nvd.nist.gov/vuln/detail/CVE-2008-1675
https://usn.ubuntu.com/614-1/
vendor-advisoryx_refsource_UBUNTU
https://www.cve.org/CVERecord?id=CVE-2008-1675
https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00232.html
vendor-advisoryx_refsource_FEDORA

Link	Providers	Tags
http://marc.info/?l=linux-kernel&m=120949204519706&w=2		mailing-listx_refsource_MLISTExploit
http://marc.info/?l=linux-kernel&m=120949204619718&w=2		mailing-listx_refsource_MLISTExploit
http://marc.info/?l=linux-kernel&m=120949582428998&w=2		mailing-listx_refsource_MLISTExploit
http://secunia.com/advisories/30017		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/30044		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/30260		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/30515		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://wiki.rpath.com/Advisories:rPSA-2008-0157		x_refsource_CONFIRM
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0157		x_refsource_CONFIRM
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.1		x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=MDVSA-2008:109		vendor-advisoryx_refsource_MANDRIVA
http://www.mandriva.com/security/advisories?name=MDVSA-2008:167		vendor-advisoryx_refsource_MANDRIVA
http://www.securityfocus.com/archive/1/491566/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/491732/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/29014		vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1019960		vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2008/1406/references		vdb-entryx_refsource_VUPENVendor Advisory
https://access.redhat.com/security/cve/CVE-2008-1675		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=444416		Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/42132		vdb-entryx_refsource_XF
https://issues.rpath.com/browse/RPL-2501		x_refsource_CONFIRM
https://nvd.nist.gov/vuln/detail/CVE-2008-1675
https://usn.ubuntu.com/614-1/		vendor-advisoryx_refsource_UBUNTU
https://www.cve.org/CVERecord?id=CVE-2008-1675
https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00232.html		vendor-advisoryx_refsource_FEDORA

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner redhat

Published May 2, 2008

Updated Aug 7, 2024

Reserved Apr 3, 2008

Link CVE-2008-1675

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2008-1675

Red Hat

Severity n/a

Public date n/a

Links CVE-2008-1675 - Bugzilla