CVE-2008-2372: Linux Kernel

Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days.

The Linux kernel 2.6.24 and 2.6.25 before 2.6.25.9 allows local users to cause a denial of service (memory consumption) via a large number of calls to the get_user_pages function, which lacks a ZERO_PAGE optimization and results in allocation of "useless newly zeroed pages."

Affected products

• Linux Linux Kernel: version 2.6.24 only; version 2.6.25 only; version 2.6.25.1 only; version 2.6.25.2 only; version 2.6.25.3 only; version 2.6.25.4 only; …

Published 2008-07-02. Last modified 2026-06-16.