CVE-2008-4307: Linux Kernel

Medium severity, CVSS 4.0. EPSS: 0.3% chance of exploitation in the next 30 days.

Race condition in the do_setlk function in fs/nfs/file.c in the Linux kernel before 2.6.26 allows local users to cause a denial of service (crash) via vectors resulting in an interrupted RPC call that leads to a stray FL_POSIX lock, related to improper handling of a race between fcntl and close in the EINTR case.

Affected products

• Linux Linux Kernel: up to and including 2.6.25.9; version 2.2.27 only; version 2.4.36 only; version 2.4.36.1 only; version 2.4.36.2 only; version 2.4.36.3 only; …

Published 2009-01-13. Last modified 2026-06-16.