CVE-2008-1675

The bdx_ioctl_priv function in the tehuti driver (tehuti.c) in Linux kernel 2.6.x before 2.6.25.1 does not properly check certain information related to register size, which has unspecified impact and local attack vectors, probably related to reading or writing kernel memory.

• CWE-399

• http://marc.info/?l=linux-kernel&m=120949204519706&w=2Exploit
• http://marc.info/?l=linux-kernel&m=120949204619718&w=2Exploit
• http://marc.info/?l=linux-kernel&m=120949582428998&w=2Exploit
• http://secunia.com/advisories/30017Vendor Advisory
• http://secunia.com/advisories/30044Vendor Advisory
• http://secunia.com/advisories/30260Vendor Advisory
• http://secunia.com/advisories/30515Vendor Advisory
• http://wiki.rpath.com/Advisories:rPSA-2008-0157
• http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0157
• http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.1
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:109
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:167
• http://www.securityfocus.com/archive/1/491566/100/0/threaded
• http://www.securityfocus.com/archive/1/491732/100/0/threaded
• http://www.securityfocus.com/bid/29014
• http://www.securitytracker.com/id?1019960
• http://www.vupen.com/english/advisories/2008/1406/referencesVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42132
• https://issues.rpath.com/browse/RPL-2501
• https://usn.ubuntu.com/614-1/
• https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00232.html
• http://marc.info/?l=linux-kernel&m=120949204519706&w=2Exploit
• http://marc.info/?l=linux-kernel&m=120949204619718&w=2Exploit
• http://marc.info/?l=linux-kernel&m=120949582428998&w=2Exploit
• http://secunia.com/advisories/30017Vendor Advisory
• http://secunia.com/advisories/30044Vendor Advisory
• http://secunia.com/advisories/30260Vendor Advisory
• http://secunia.com/advisories/30515Vendor Advisory
• http://wiki.rpath.com/Advisories:rPSA-2008-0157
• http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0157
• http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.1
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:109
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:167
• http://www.securityfocus.com/archive/1/491566/100/0/threaded
• http://www.securityfocus.com/archive/1/491732/100/0/threaded
• http://www.securityfocus.com/bid/29014
• http://www.securitytracker.com/id?1019960
• http://www.vupen.com/english/advisories/2008/1406/referencesVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42132
• https://issues.rpath.com/browse/RPL-2501
• https://usn.ubuntu.com/614-1/
• https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00232.html

Published

May 2, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-1669Linux kernel before 2.6.25.2 does not apply a certain protec…
• CVE-2008-1670Heap-based buffer overflow in the progressive PNG Image load…
• CVE-2008-1671start_kdeinit in KDE 3.5.5 through 3.5.9, when installed set…
• CVE-2008-1672OpenSSL 0.9.8f and 0.9.8g allows remote attackers to cause a…
• CVE-2008-1673The asn1 implementation in (a) the Linux kernel 2.4 before 2…
• CVE-2008-1674Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2008-1676Red Hat PKI Common Framework (rhpki-common) in Red Hat Certi…
• CVE-2008-1677Buffer overflow in the regular expression handler in Red Hat…
• CVE-2008-1678Memory leak in the zlib_stateful_init function in crypto/com…
• CVE-2008-1679Multiple integer overflows in imageop.c in Python before 2.5…
• CVE-2008-1680PHP-Nuke Platinum 7.6.b.5 allows remote attackers to obtain …
• CVE-2008-1681Unspecified vulnerability in IBM DB2 Content Manager before …