CVE-2008-1294: Linux Kernel

Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days.

Linux kernel 2.6.17, and other versions before 2.6.22, does not check when a user attempts to set RLIMIT_CPU to 0 until after the change is made, which allows local users to bypass intended resource limits.

Affected products

• Linux Linux Kernel: up to and including 2.6.21; version 2.6.2 only; version 2.6.16 only; version 2.6.16.1 only; version 2.6.16.2 only; version 2.6.16.3 only; …

Published 2008-05-02. Last modified 2026-06-16.