CVE-2008-5182: Linux Kernel

Medium severity, CVSS 6.9. EPSS: 0.3% chance of exploitation in the next 30 days.

The inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain privileges via unknown vectors related to race conditions in inotify watch removal and umount.

Affected products

• Linux Linux Kernel: up to and including 2.6.28; version 2.6 only; version 2.6.1 only; version 2.6.2 only; version 2.6.10 only; version 2.6.11 only; …

Published 2008-11-21. Last modified 2026-06-16.