CVE-2008-2729

arch/x86_64/lib/copy_user.S in the Linux kernel before 2.6.19 on some AMD64 systems does not erase destination memory locations after an exception during kernel memory copy, which allows local users to obtain sensitive information.

• CWE-200

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=3022d734a54cbd2b65eea9a024564821101b4a9a%3Bhp=f0f4c3432e5e1087b3a8c0e6bd4113d3c37497ff
• http://rhn.redhat.com/errata/RHSA-2008-0508.htmlThird Party Advisory
• http://secunia.com/advisories/30849Broken Link
• http://secunia.com/advisories/30850Broken Link
• http://secunia.com/advisories/31107Broken Link
• http://secunia.com/advisories/31551Broken Link
• http://secunia.com/advisories/31628Broken Link
• http://www.debian.org/security/2008/dsa-1630Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:174Broken Link
• http://www.redhat.com/support/errata/RHSA-2008-0519.htmlBroken Link
• http://www.redhat.com/support/errata/RHSA-2008-0585.htmlBroken Link
• http://www.securityfocus.com/bid/29943Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1020364Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/usn-625-1Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=451271Issue Tracking, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43558Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11571Tool Signature
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=3022d734a54cbd2b65eea9a024564821101b4a9a%3Bhp=f0f4c3432e5e1087b3a8c0e6bd4113d3c37497ff
• http://rhn.redhat.com/errata/RHSA-2008-0508.htmlThird Party Advisory
• http://secunia.com/advisories/30849Broken Link
• http://secunia.com/advisories/30850Broken Link
• http://secunia.com/advisories/31107Broken Link
• http://secunia.com/advisories/31551Broken Link
• http://secunia.com/advisories/31628Broken Link
• http://www.debian.org/security/2008/dsa-1630Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:174Broken Link
• http://www.redhat.com/support/errata/RHSA-2008-0519.htmlBroken Link
• http://www.redhat.com/support/errata/RHSA-2008-0585.htmlBroken Link
• http://www.securityfocus.com/bid/29943Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1020364Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/usn-625-1Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=451271Issue Tracking, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43558Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11571Tool Signature

Published

Jun 30, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-2723embed.php in Menalto Gallery before 2.2.5 allows remote atta…
• CVE-2008-2724Menalto Gallery before 2.2.5 does not enforce permissions fo…
• CVE-2008-2725Integer overflow in the (1) rb_ary_splice function in Ruby 1…
• CVE-2008-2726Integer overflow in the (1) rb_ary_splice function in Ruby 1…
• CVE-2008-2727Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2008-2728Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2008-2730The Real-Time Information Server (RIS) Data Collector servic…
• CVE-2008-2732Multiple unspecified vulnerabilities in the SIP inspection f…
• CVE-2008-2733Cisco PIX and Adaptive Security Appliance (ASA) 5500 devices…
• CVE-2008-2734Memory leak in the crypto functionality in Cisco Adaptive Se…
• CVE-2008-2735The HTTP server in Cisco Adaptive Security Appliance (ASA) 5…
• CVE-2008-2736Unspecified vulnerability in Cisco Adaptive Security Applian…