CVE-2008-0009: Linux Kernel

Low severity, CVSS 2.1. EPSS: 1% chance of exploitation in the next 30 days.

The vmsplice_to_user function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain userspace pointer before dereference, which might allow local users to access arbitrary kernel memory locations.

Affected products

• Linux Linux Kernel: version 2.6.22 only; version 2.6.22.1 only; version 2.6.22.3 only; version 2.6.22.4 only; version 2.6.22.5 only; version 2.6.22.6 only; …

Published 2008-02-12. Last modified 2026-06-16.