Linux Kernel Find_Target Local Denial Of Service Vulnerability

Bugtraq ID:	14965
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2005-2553
Remote:	No
Local:	Yes
Published:	Apr 12 2005 12:00AM
Updated:	Jan 19 2007 03:29AM
Credit:	Mark Bellon reported this issue to the vendor.
Vulnerable:	SuSE SUSE Linux Enterprise Server 8 + Linux kernel 2.4.21 + Linux kernel 2.4.19 Redhat Enterprise Linux WS 3 Redhat Enterprise Linux ES 3 Redhat Enterprise Linux AS 3 Redhat Desktop 3.0 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 2.1 x86_64 MandrakeSoft Corporate Server 2.1 Linux kernel 2.4.28 + Trustix Secure Enterprise Linux 2.0 + Trustix Secure Linux 2.2 + Trustix Secure Linux 2.1 + Trustix Secure Linux 2.0 Linux kernel 2.4.27 -pre5 Linux kernel 2.4.27 -pre4 Linux kernel 2.4.27 -pre3 Linux kernel 2.4.27 -pre2 Linux kernel 2.4.27 -pre1 Linux kernel 2.4.27 Linux kernel 2.4.26 Linux kernel 2.4.25 Linux kernel 2.4.24 -ow1 Linux kernel 2.4.24 Linux kernel 2.4.23 -pre9 Linux kernel 2.4.23 -ow2 Linux kernel 2.4.23 + Trustix Secure Linux 2.0 Linux kernel 2.4.22 + Devil-Linux Devil-Linux 1.0.5 + Devil-Linux Devil-Linux 1.0.4 + Mandriva Linux Mandrake 9.2 amd64 + Mandriva Linux Mandrake 9.2 + Redhat Fedora Core1 + Slackware Linux 9.1 Linux kernel 2.4.21 pre7 Linux kernel 2.4.21 pre4 + Mandriva Linux Mandrake 9.1 ppc + Mandriva Linux Mandrake 9.1 Linux kernel 2.4.21 pre1 Linux kernel 2.4.21 + Mandriva Linux Mandrake 9.1 ppc + Mandriva Linux Mandrake 9.1 + Redhat Desktop 3.0 + Redhat Enterprise Linux AS 3 + Redhat Enterprise Linux ES 3 + Redhat Enterprise Linux WS 3 + S.u.S.E. Linux Personal 9.0 x86_64 + S.u.S.E. Linux Personal 9.0 + SuSE SUSE Linux Enterprise Server 8 Linux kernel 2.4.20 + CRUX CRUX Linux 1.0 + Gentoo Linux 1.4 + Gentoo Linux 1.2 + Redhat Linux 9.0 i386 + Slackware Linux 9.0 + WOLK WOLK 4.4 s Linux kernel 2.4.19 -pre6 Linux kernel 2.4.19 -pre5 Linux kernel 2.4.19 -pre4 Linux kernel 2.4.19 -pre3 Linux kernel 2.4.19 -pre2 Linux kernel 2.4.19 -pre1 Linux kernel 2.4.19 + Conectiva Linux Enterprise Edition 1.0 + MandrakeSoft Corporate Server 2.1 x86_64 + MandrakeSoft Corporate Server 2.1 + MandrakeSoft Multi Network Firewall 2.0 + Mandriva Linux Mandrake 9.0 + Slackware Linux -current + SuSE Linux 8.1 + SuSE SUSE Linux Enterprise Server 8 + SuSE SUSE Linux Enterprise Server 7 Linux kernel 2.4.18 pre-8 Linux kernel 2.4.18 pre-7 Linux kernel 2.4.18 pre-6 Linux kernel 2.4.18 pre-5 Linux kernel 2.4.18 pre-4 Linux kernel 2.4.18 pre-3 Linux kernel 2.4.18 pre-2 Linux kernel 2.4.18 pre-1 Linux kernel 2.4.18 x86 + Debian Linux 3.0 ia-32 Linux kernel 2.4.18 + Astaro Security Linux 2.0 23 + Astaro Security Linux 2.0 16 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + Mandriva Linux Mandrake 8.2 + Mandriva Linux Mandrake 8.1 + Mandriva Linux Mandrake 8.0 + Redhat Advanced Workstation for the Itanium Processor 2.1 IA64 + Redhat Advanced Workstation for the Itanium Processor 2.1 + Redhat Enterprise Linux AS 2.1 IA64 + Redhat Linux 8.0 + Redhat Linux 7.3 + S.u.S.E. Linux Connectivity Server + S.u.S.E. Linux Database Server 0 + S.u.S.E. Linux Firewall on CD + S.u.S.E. Linux Office Server + S.u.S.E. Linux Personal 8.2 + S.u.S.E. SuSE eMail Server 3.1 + S.u.S.E. SuSE eMail Server III + SuSE Linux 8.1 + SuSE Linux 8.0 + SuSE Linux 7.3 + SuSE Linux 7.2 + SuSE Linux 7.1 + SuSE Linux Openexchange Server + SuSE SUSE Linux Enterprise Server 8 + SuSE SUSE Linux Enterprise Server 7 + Turbolinux Turbolinux Server 8.0 + Turbolinux Turbolinux Server 7.0 + Turbolinux Turbolinux Workstation 8.0 + Turbolinux Turbolinux Workstation 7.0 Linux kernel 2.4.17 Linux kernel 2.4.16 + Sun Cobalt RaQ 550 Linux kernel 2.4.15 Linux kernel 2.4.14 Linux kernel 2.4.13 + Caldera OpenLinux Server 3.1.1 + Caldera OpenLinux Workstation 3.1.1 Linux kernel 2.4.12 Linux kernel 2.4.11 Linux kernel 2.4.10 + SuSE Linux 7.3 Linux kernel 2.4.9 + Redhat Enterprise Linux AS 2.1 IA64 + Redhat Enterprise Linux AS 2.1 + Redhat Enterprise Linux ES 2.1 IA64 + Redhat Enterprise Linux ES 2.1 + Redhat Enterprise Linux WS 2.1 IA64 + Redhat Enterprise Linux WS 2.1 + Redhat Linux 7.2 ia64 + Redhat Linux 7.2 i386 + Redhat Linux 7.2 alpha + Redhat Linux 7.1 ia64 + Redhat Linux 7.1 i386 + Redhat Linux 7.1 alpha + Sun Linux 5.0.5 + Sun Linux 5.0.3 + Sun Linux 5.0 Linux kernel 2.4.8 + Mandriva Linux Mandrake 8.2 + Mandriva Linux Mandrake 8.1 + Mandriva Linux Mandrake 8.0 Linux kernel 2.4.7 + Redhat Linux 7.2 + SuSE Linux 7.2 + SuSE Linux 7.1 Linux kernel 2.4.6 Linux kernel 2.4.5 + Slackware Linux 8.0 Linux kernel 2.4.4 + SuSE Linux 7.2 Linux kernel 2.4.3 + Mandriva Linux Mandrake 8.0 ppc + Mandriva Linux Mandrake 8.0 Linux kernel 2.4.2 + Caldera OpenLinux Server 3.1 + Caldera OpenLinux Workstation 3.1 + Redhat Linux 7.1 i386 + Redhat Linux 7.1 alpha Linux kernel 2.4.1 Linux kernel 2.4 .0-test9 Linux kernel 2.4 .0-test8 Linux kernel 2.4 .0-test7 Linux kernel 2.4 .0-test6 Linux kernel 2.4 .0-test5 Linux kernel 2.4 .0-test4 Linux kernel 2.4 .0-test3 Linux kernel 2.4 .0-test2 Linux kernel 2.4 .0-test12 Linux kernel 2.4 .0-test11 Linux kernel 2.4 .0-test10 Linux kernel 2.4 .0-test1 Linux kernel 2.4 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1
Not Vulnerable:	Linux kernel 2.4.29

Linux Kernel Find_Target Local Denial Of Service Vulnerability

A local denial-of-service vulnerability affects the 'find_target()' function of the Linux kernel. This issue is due to this function's failure to properly handle unexpected conditions when trying to handle a NULL return value from another function.

Local attackers may exploit this vulnerability to trigger a kernel crash, denying service to legitimate users.

This issue likely affects only the x86_64 architecture.

Linux Kernel Find_Target Local Denial Of Service Vulnerability

An exploit is not required.

Linux Kernel Find_Target Local Denial Of Service Vulnerability

Solution:
Please see the referenced vendor advisories for more information and fixes.


Linux kernel 2.4 .0-test3

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4 .0-test6

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4 .0-test8

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4 .0-test7

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4 .0-test2

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4 .0-test11

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4 .0-test10

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4 .0-test4

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4 .0-test1

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4 .0-test5

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4 .0-test12

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4 .0-test9

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.1

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.10

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.11

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.12

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.13

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.14

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.15

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.16

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.17

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.18 pre-8

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.18 pre-7

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.18

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.18 pre-6

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.18 pre-3

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.18 pre-2

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.18 pre-4

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.18 pre-5

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.18 x86

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.18 pre-1

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.19 -pre4

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.19 -pre1

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.19 -pre6

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.19 -pre2

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.19

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2


• Mandriva kernel-2.4.19.50mdk-1-1mdk.i586.rpm
  Corporate Server 2.1:
  http://www.mandriva.com/en/download


• Mandriva kernel-2.4.19.50mdk-1-1mdk.src.rpm
  Corporate Server 2.1:
  http://www.mandriva.com/en/download


• Mandriva kernel-2.4.19.50mdk-1-1mdk.x86_64.rpm
  Corporate Server 2.1:
  http://www.mandriva.com/en/download


• Mandriva kernel-enterprise-2.4.19.50mdk-1-1mdk.i586.rpm
  Corporate Server 2.1:
  http://www.mandriva.com/en/download


• Mandriva kernel-secure-2.4.19.50mdk-1-1mdk.i586.rpm
  Corporate Server 2.1:
  http://www.mandriva.com/en/download


• Mandriva kernel-secure-2.4.19.50mdk-1-1mdk.x86_64.rpm
  Corporate Server 2.1:
  http://www.mandriva.com/en/download


• Mandriva kernel-smp-2.4.19.50mdk-1-1mdk.i586.rpm
  Corporate Server 2.1:
  http://www.mandriva.com/en/download


• Mandriva kernel-smp-2.4.19.50mdk-1-1mdk.x86_64.rpm
  Corporate Server 2.1:
  http://www.mandriva.com/en/download

Linux kernel 2.4.19 -pre5

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.19 -pre3

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.2

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.20

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.21

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.21 pre1

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.21 pre4

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.21 pre7

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.22

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.23

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.23 -ow2

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.23 -pre9

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.24

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.24 -ow1

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.25

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2


• Mandriva kernel-2.4.25.15mdk-1-1mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva kernel-2.4.25.15mdk-1-1mdk.src.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva kernel-2.4.25.15mdk-1-1mdk.x86_64.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva kernel-enterprise-2.4.25.15mdk-1-1mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva kernel-i686-up-4GB-2.4.25.15mdk-1-1mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva kernel-p3-smp-64GB-2.4.25.15mdk-1-1mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva kernel-smp-2.4.25.15mdk-1-1mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva kernel-smp-2.4.25.15mdk-1-1mdk.x86_64.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download

Linux kernel 2.4.26

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.27 -pre1

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.27

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.27 -pre2

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.27 -pre4

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.27 -pre3

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.27 -pre5

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.28

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.3

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.4

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.5

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.6

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.7

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.8

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux kernel 2.4.9

• Linux linux-2.4.29.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.4/linux-2.4.29.tar.bz2

Linux Kernel Find_Target Local Denial Of Service Vulnerability

References:

• PATCH: 2.4.28: 32 bit ltrace oops when tracing 64 bit executable [X86_64] (Mark Bellon)
  
• RHSA-2005:663-19 - Updated kernel packages available for Red Hat Enterprise Linu (RedHat)