
CVE-2008-0001 | Checking the wrong permission slip Imagine a guard checking the wrong box on a visitor's form. The check happens, but it answers the wrong question. Older Linux kernels had a similar flaw in VFS, the layer that handles file operations. It checked the wrong variable when deciding access rights. This might let a local user bypass permissions and remove directories. The lesson: having a security check is not enough. It must inspect the right information.
