← Vulnerability feed

Vulnerability record · CVE-2008-2812 · published 9 July 2008

CVE-2008-2812: Linux kernel null pointer dereference vulnerability

Linux · Linux Kernel

The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in (1) hamradio/6pack.c, (2) hamradio/mkiss.c, (3) irda/irtty-sir.c, (4) ppp_async.c, (5) ppp_synctty.c, (6) slip.c, (7) wan/x25_asy.c, and (8) wireless/strip.c in drivers/net/.

7.8 CVSS 3.1 High EPSS 0.43% · top 65.6% CWE-476 · NULL pointer dereference
7.8CVSS 3.1 base score, v2 7.2
0.43%EPSS exploitation probability, 30 days
NoNot in CISA KEV
15Affected product versions listed by NVD
66References
16 Jun 2026Last modified by NVD

Description

The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in (1) hamradio/6pack.c, (2) hamradio/mkiss.c, (3) irda/irtty-sir.c, (4) ppp_async.c, (5) ppp_synctty.c, (6) slip.c, (7) wan/x25_asy.c, and (8) wireless/strip.c in drivers/net/.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

15 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commitdiff%3Bh=2a739dd53ad7ee010ae6e155438507f32
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.10 Broken Link
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html Mailing ListThird Party Advisory
http://secunia.com/advisories/30982 Broken Link
http://secunia.com/advisories/31048 Broken Link
http://secunia.com/advisories/31202 Broken Link
http://secunia.com/advisories/31229 Broken Link
http://secunia.com/advisories/31341 Broken Link
http://secunia.com/advisories/31551 Broken Link
http://secunia.com/advisories/31614 Broken Link
http://secunia.com/advisories/31685 Broken Link
http://secunia.com/advisories/32103 Broken Link
http://secunia.com/advisories/32370 Broken Link
http://secunia.com/advisories/32759 Broken Link
http://secunia.com/advisories/33201 Broken Link
http://support.avaya.com/elmodocs2/security/ASA-2008-365.htm Third Party Advisory
http://www.debian.org/security/2008/dsa-1630 PatchThird Party Advisory
http://www.openwall.com/lists/oss-security/2008/07/03/2 Mailing ListPatchThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0612.html Broken Link
http://www.redhat.com/support/errata/RHSA-2008-0665.html Broken Link
http://www.redhat.com/support/errata/RHSA-2008-0973.html Broken Link
http://www.securityfocus.com/bid/30076 PatchThird Party AdvisoryVDB Entry
http://www.vupen.com/english/advisories/2008/2063/references Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/43687 Third Party AdvisoryVDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11632 Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6633 Third Party Advisory
https://usn.ubuntu.com/637-1/ Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commitdiff%3Bh=2a739dd53ad7ee010ae6e155438507f32
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.10 Broken Link
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html Mailing ListThird Party Advisory

Track CVE-2008-2812 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.0CVE-2008-6708Avaya communication manager vulnerabilityUnspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manage…EPSS 2.1%9.0CVE-2008-6709Avaya sip enablement services vulnerabilityUnspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manage…EPSS 2.4%9.0CVE-2008-6710Avaya communication manager vulnerabilityUnspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 all…EPSS 2.1%9.0CVE-2008-6711Avaya communication manager vulnerabilityUnspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 all…EPSS 2.4%9.0CVE-2008-5709Avaya communication manager improper input validation vulnerabilityMultiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, …EPSS 3.3%7.8CVE-2008-6706Avaya sip enablement services vulnerabilityMultiple unspecified vulnerabilities in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communica…EPSS 2.3%7.8CVE-2009-0115Christophe.varoqui multipath-tools incorrect permission assignment vulnerabilityThe Device Mapper multipathing driver (aka multipath-tools or device-mapper-multipath) 0.4.8, as used in SUSE openSUSE, SUSE Linux Enterprise Server …EPSS 0.49%7.8CVE-2007-5830Avaya message networking improper input validation vulnerabilityUnspecified vulnerability in the administrative interface in Avaya Messaging Storage Server (MSS) 3.1 before SP1, and Message Networking (MN) 3.1, al…EPSS 1.6%

Source: NIST National Vulnerability Database (record CVE-2008-2812), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.