CVE catalog
CVE-2008-3525
fai-kernels linux-2.6 user-mode-linux - several vulnerabilities
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 0.53% · Oct 25, 2026
The sbni_ioctl function in drivers/net/wan/sbni.c in the wan subsystem in the Linux kernel 2.6.26.3 does not check for the CAP_NET_ADMIN capability before processing a (1) SIOCDEVRESINSTATS, (2) SIOCDEVSHWSTATE, (3) SIOCDEVENSLAVE, or (4) SIOCDEVEMANSIPATE ioctl request, which allows local users to bypass intended capability restrictions. kernel: missing capability checks in sbni_ioctl()
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | fai-kernels | 4.0 | 1.17 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch.13etch3 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch.13etch4 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch.13etch5 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch.13etch6 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch.16 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch.17 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch.17etch1 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch.18etch1 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch.18etch2 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch.18etch3 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch.18etch4 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch.18etch5 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch.18etch6 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch.21 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch.22etch1 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch.22etch2 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch1 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch2 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch3 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch4 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch5 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17etch1 | vulnerable |
| Debian | fai-kernels | 4.0 | 1.17+etch.22etch3 | fixed |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-12 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-12etch1 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-12etch2 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-13 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-13etch1 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-13etch2 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-13etch3 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-13etch4 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-13etch5 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-13etch6 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-13lenny1 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-14 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-15 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-16 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-17 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-17etch1 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-18 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-18etch1 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-18etch3 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-18etch4 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-18etch5 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-18etch6 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-19 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-20 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-21 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-22 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-22etch1 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-22etch2 | vulnerable |
| Debian | linux-2.6 | 4.0 | 2.6.18.dfsg.1-22etch3 | fixed |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch.13etch3 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch.13etch4 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch.13etch5 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch.13etch6 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch.16 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch.17 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch.17etch1 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch.18etch1 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch.18etch2 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch.18etch3 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch.18etch4 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch.18etch5 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch.18etch6 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch.21 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch.22etch1 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch.22etch2 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch1 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch2 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch3 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch4 | vulnerable |
| Debian | user-mode-linux | 4.0 | 2.6.18-1um-2etch.22etch3 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | fai-kernels | deb | 4.0 | 1.17+etch.22etch3 | Not reported | DSA-1653-1 | Not reported |
| Debian | linux-2.6 | deb | 4.0 | 2.6.18.dfsg.1-22etch3 | Not reported | DSA-1653-1 | Not reported |
| Debian | user-mode-linux | deb | 4.0 | 2.6.18-1um-2etch.22etch3 | Not reported | DSA-1653-1 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed: