CVE-2008-2137

CVE-2008-2137 describes a denial-of-service vulnerability in the Linux kernel versions 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3, specifically affecting systems with SPARC and SPARC64 architectures. The flaw lies in the sparc_mmap_check and sparc64_mmap_check functions, which fail to adequately validate virtual-address ranges during mmap calls when the MAP_FIXED bit is not set. This allows a local attacker to trigger a system panic. The vulnerability has a CVSS score of 4.4, indicating a medium severity. It requires local access (AV:L) and medium attack complexity (AC:M), with no authentication needed (Au:N). The primary impact is a denial of service (A:P), though there are also potential confidentiality and integrity impacts (C:P/I:P). There is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. The vulnerability has received minimal community attention, with no social media discussion or media coverage reported.