Linux Kernel handle_stop_signal Denial of Service Vulnerability
BID:16856
Info
Linux Kernel handle_stop_signal Denial of Service Vulnerability
| Bugtraq ID: | 16856 |
| Class: | Race Condition Error |
| CVE: |
CVE-2005-3847 |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 17 2005 12:00AM |
| Updated: | Jan 19 2007 03:50AM |
| Credit: | Announced in a SuSE advisory. |
| Vulnerable: |
S.u.S.E. Linux Professional 9.3 x86_64 S.u.S.E. Linux Professional 9.3 S.u.S.E. Linux Personal 9.3 x86_64 S.u.S.E. Linux Personal 9.3 Linux kernel 2.6.12 .5 Linux kernel 2.6.12 .4 Linux kernel 2.6.12 .3 Linux kernel 2.6.12 .2 Linux kernel 2.6.12 .1 Linux kernel 2.6.12 -rc5 Linux kernel 2.6.12 -rc4 Linux kernel 2.6.12 -rc1 Linux kernel 2.6.11 .8 Linux kernel 2.6.11 .7 Linux kernel 2.6.11 .6 Linux kernel 2.6.11 .5 Linux kernel 2.6.11 .12 Linux kernel 2.6.11 .11 Linux kernel 2.6.11 -rc4 Linux kernel 2.6.11 -rc3 Linux kernel 2.6.11 -rc2 Linux kernel 2.6.11 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 |
| Not Vulnerable: | |
Discussion
Linux Kernel handle_stop_signal Denial of Service Vulnerability
Linux kernel is prone to a denial-of-service vulnerability caused by a race condition in 'handle_stop_signal()'.
Successful exploitation can cause the system to stop responding.
Linux kernel is prone to a denial-of-service vulnerability caused by a race condition in 'handle_stop_signal()'.
Successful exploitation can cause the system to stop responding.
Exploit / POC
Linux Kernel handle_stop_signal Denial of Service Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
Linux Kernel handle_stop_signal Denial of Service Vulnerability
Solution:
The vendor has released updates to address this issue. Please see the referenced vendor advisories for more information.
Linux kernel 2.6.11 -rc3
Linux kernel 2.6.11
Linux kernel 2.6.11 -rc4
Linux kernel 2.6.11 .6
Linux kernel 2.6.11 .11
Linux kernel 2.6.11 .12
Linux kernel 2.6.11 .7
Linux kernel 2.6.11 -rc2
Linux kernel 2.6.11 .5
Linux kernel 2.6.11 .8
Linux kernel 2.6.12 .2
Linux kernel 2.6.12 .4
Linux kernel 2.6.12 .3
Linux kernel 2.6.12 .1
Linux kernel 2.6.12 -rc5
Linux kernel 2.6.12 .5
Linux kernel 2.6.12 -rc4
Linux kernel 2.6.12 -rc1
Solution:
The vendor has released updates to address this issue. Please see the referenced vendor advisories for more information.
Linux kernel 2.6.11 -rc3
-
Linux linux-2.6.12.6.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.12.6.tar.bz2
Linux kernel 2.6.11
-
Linux linux-2.6.12.6.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.12.6.tar.bz2 -
SuSE Intel-536ep-4.69-10.5.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/Intel-536ep-4.69- 10.5.i586.rpm -
SuSE kernel-bigsmp-2.6.11.4-21.11.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/kernel-bigsmp-2.6 .11.4-21.11.i586.rpm -
SuSE kernel-bigsmp-nongpl-2.6.11.4-21.11.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/kernel-bigsmp-non gpl-2.6.11.4-21.11.i586.rpm -
SuSE kernel-default-2.6.11.4-21.11.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/kernel-default-2. 6.11.4-21.11.i586.rpm -
SuSE kernel-default-2.6.11.4-21.11.x86_64.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/kernel-default- 2.6.11.4-21.11.x86_64.rpm -
SuSE kernel-default-nongpl-2.6.11.4-21.11.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/kernel-default-no ngpl-2.6.11.4-21.11.i586.rpm -
SuSE kernel-default-nongpl-2.6.11.4-21.11.x86_64.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/kernel-default- nongpl-2.6.11.4-21.11.x86_64.rpm -
SuSE kernel-docs-2.6.11.4-21.11.noarch.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/noarch/kernel-docs-2.6 .11.4-21.11.noarch.rpm -
SuSE kernel-smp-2.6.11.4-21.11.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/kernel-smp-2.6.11 .4-21.11.i586.rpm -
SuSE kernel-smp-2.6.11.4-21.11.x86_64.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/kernel-smp-2.6. 11.4-21.11.x86_64.rpm -
SuSE kernel-smp-nongpl-2.6.11.4-21.11.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/kernel-smp-nongpl -2.6.11.4-21.11.i586.rpm -
SuSE kernel-smp-nongpl-2.6.11.4-21.11.x86_64.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/kernel-smp-nong pl-2.6.11.4-21.11.x86_64.rpm -
SuSE kernel-source-2.6.11.4-21.11.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/kernel-source-2.6 .11.4-21.11.i586.rpm -
SuSE kernel-source-2.6.11.4-21.11.x86_64.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/kernel-source-2 .6.11.4-21.11.x86_64.rpm -
SuSE kernel-syms-2.6.11.4-21.11.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/kernel-syms-2.6.1 1.4-21.11.i586.rpm -
SuSE kernel-syms-2.6.11.4-21.11.x86_64.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/kernel-syms-2.6 .11.4-21.11.x86_64.rpm -
SuSE kernel-um-2.6.11.4-21.11.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/kernel-um-2.6.11. 4-21.11.i586.rpm -
SuSE kernel-um-nongpl-2.6.11.4-21.11.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/kernel-um-nongpl- 2.6.11.4-21.11.i586.rpm -
SuSE kernel-xen-2.6.11.4-21.11.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/kernel-xen-2.6.11 .4-21.11.i586.rpm -
SuSE kernel-xen-nongpl-2.6.11.4-21.11.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/kernel-xen-nongpl -2.6.11.4-21.11.i586.rpm -
SuSE ltmodem-8.31a10-7.5.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/ltmodem-8.31a10-7 .5.i586.rpm -
SuSE um-host-install-initrd-1.0-50.5.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/um-host-install-i nitrd-1.0-50.5.i586.rpm -
SuSE um-host-kernel-2.6.11.4-21.11.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/um-host-kernel-2. 6.11.4-21.11.i586.rpm
Linux kernel 2.6.11 -rc4
-
Linux linux-2.6.12.6.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.12.6.tar.bz2
Linux kernel 2.6.11 .6
-
Linux linux-2.6.12.6.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.12.6.tar.bz2
Linux kernel 2.6.11 .11
-
Linux linux-2.6.12.6.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.12.6.tar.bz2
Linux kernel 2.6.11 .12
-
Linux linux-2.6.12.6.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.12.6.tar.bz2
Linux kernel 2.6.11 .7
-
Linux linux-2.6.12.6.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.12.6.tar.bz2
Linux kernel 2.6.11 -rc2
-
Linux linux-2.6.12.6.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.12.6.tar.bz2
Linux kernel 2.6.11 .5
-
Linux linux-2.6.12.6.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.12.6.tar.bz2
Linux kernel 2.6.11 .8
-
Linux linux-2.6.12.6.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.12.6.tar.bz2
Linux kernel 2.6.12 .2
-
Linux linux-2.6.12.6.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.12.6.tar.bz2
Linux kernel 2.6.12 .4
-
Linux linux-2.6.12.6.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.12.6.tar.bz2
Linux kernel 2.6.12 .3
-
Linux linux-2.6.12.6.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.12.6.tar.bz2
Linux kernel 2.6.12 .1
-
Linux linux-2.6.12.6.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.12.6.tar.bz2
Linux kernel 2.6.12 -rc5
-
Linux linux-2.6.12.6.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.12.6.tar.bz2
Linux kernel 2.6.12 .5
-
Linux linux-2.6.12.6.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.12.6.tar.bz2
Linux kernel 2.6.12 -rc4
-
Linux linux-2.6.12.6.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.12.6.tar.bz2
Linux kernel 2.6.12 -rc1
-
Linux linux-2.6.12.6.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.12.6.tar.bz2
References
Linux Kernel handle_stop_signal Denial of Service Vulnerability
References:
References:
- [PATCH 2.6.12.5] NPTL signal delivery deadlock fix (kernel.org)
- 2.6.12.6/nptl-signal-delivery-deadlock-fix.patch (kernel.org)