Linux Kernel Non-Hugemem Support Local Denial of Service Vulnerability
BID:19664
CVE-2006-2932 |Info
Linux Kernel Non-Hugemem Support Local Denial of Service Vulnerability
| Bugtraq ID: | 19664 |
| Class: | Design Error |
| CVE: |
CVE-2006-2932 |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 22 2006 12:00AM |
| Updated: | Sep 28 2006 07:06PM |
| Credit: | Wei Wang of McAfee Avert Labs and/or Kirill Korotaev discovered this issue. |
| Vulnerable: |
Redhat Enterprise Linux WS 4 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux AS 4 Redhat Desktop 4.0 Linux kernel 2.6.17 .9 Linux kernel 2.6.17 .8 Linux kernel 2.6.17 .7 Linux kernel 2.6.17 .6 Linux kernel 2.6.17 .5 Linux kernel 2.6.17 .4 Linux kernel 2.6.17 .3 Linux kernel 2.6.17 .10 Linux kernel 2.6.17 .1 Linux kernel 2.6.17 -rc5 Linux kernel 2.6.17 Linux kernel 2.6.17 Linux kernel 2.6.17 Linux kernel 2.6.16 27 Linux kernel 2.6.16 13 Linux kernel 2.6.16 .9 Linux kernel 2.6.16 .8 Linux kernel 2.6.16 .7 Linux kernel 2.6.16 .5 Linux kernel 2.6.16 .4 Linux kernel 2.6.16 .3 Linux kernel 2.6.16 .23 Linux kernel 2.6.16 .21 Linux kernel 2.6.16 .2 Linux kernel 2.6.16 .19 Linux kernel 2.6.16 .18 Linux kernel 2.6.16 .17 Linux kernel 2.6.16 .16 Linux kernel 2.6.16 .12 Linux kernel 2.6.16 .11 Linux kernel 2.6.16 .1 Linux kernel 2.6.16 -rc1 Linux kernel 2.6.16 Linux kernel 2.6.15 .6 Linux kernel 2.6.15 .4 Linux kernel 2.6.15 .3 Linux kernel 2.6.15 .2 Linux kernel 2.6.15 .1 Linux kernel 2.6.15 -rc6 Linux kernel 2.6.15 -rc5 Linux kernel 2.6.15 -rc4 Linux kernel 2.6.15 -rc3 Linux kernel 2.6.15 -rc2 Linux kernel 2.6.15 -rc1 Linux kernel 2.6.15 Linux kernel 2.6.14 .5 Linux kernel 2.6.14 .4 Linux kernel 2.6.14 .3 Linux kernel 2.6.14 .2 Linux kernel 2.6.14 .1 Linux kernel 2.6.14 -rc4 Linux kernel 2.6.14 -rc3 Linux kernel 2.6.14 -rc2 Linux kernel 2.6.14 -rc1 Linux kernel 2.6.14 Linux kernel 2.6.13 .4 Linux kernel 2.6.13 .3 Linux kernel 2.6.13 .2 Linux kernel 2.6.13 .1 Linux kernel 2.6.13 -rc7 Linux kernel 2.6.13 -rc6 Linux kernel 2.6.13 -rc4 Linux kernel 2.6.13 -rc1 Linux kernel 2.6.13 Linux kernel 2.6.12 .6 Linux kernel 2.6.12 .5 Linux kernel 2.6.12 .4 Linux kernel 2.6.12 .3 Linux kernel 2.6.12 .2 Linux kernel 2.6.12 .1 Linux kernel 2.6.12 -rc5 Linux kernel 2.6.12 -rc4 Linux kernel 2.6.12 -rc1 Linux kernel 2.6.12 Linux kernel 2.6.11 .8 Linux kernel 2.6.11 .7 Linux kernel 2.6.11 .6 Linux kernel 2.6.11 .5 Linux kernel 2.6.11 .12 Linux kernel 2.6.11 .11 Linux kernel 2.6.11 -rc4 Linux kernel 2.6.11 -rc3 Linux kernel 2.6.11 -rc2 Linux kernel 2.6.11 Linux kernel 2.6.10 rc2 Linux kernel 2.6.10 Linux kernel 2.6.9 Linux kernel 2.6.8 rc3 Linux kernel 2.6.8 rc2 Linux kernel 2.6.8 rc1 Linux kernel 2.6.8 Linux kernel 2.6.7 rc1 Linux kernel 2.6.7 Linux kernel 2.6.6 rc1 Linux kernel 2.6.6 Linux kernel 2.6.5 Linux kernel 2.6.4 Linux kernel 2.6.3 Linux kernel 2.6.2 Linux kernel 2.6.1 -rc2 Linux kernel 2.6.1 -rc1 Linux kernel 2.6.1 Linux kernel 2.6 .10 Linux kernel 2.6 -test9-CVS Linux kernel 2.6 -test9 Linux kernel 2.6 -test8 Linux kernel 2.6 -test7 Linux kernel 2.6 -test6 Linux kernel 2.6 -test5 Linux kernel 2.6 -test4 Linux kernel 2.6 -test3 Linux kernel 2.6 -test2 Linux kernel 2.6 -test11 Linux kernel 2.6 -test10 Linux kernel 2.6 -test1 Linux kernel 2.6 Linux kernel 2.6.15.5 Avaya S8710 CM 3.1 Avaya S8700 CM 3.1 Avaya S8500 CM 3.1 Avaya S8300 CM 3.1 |
| Not Vulnerable: | |
Discussion
Linux Kernel Non-Hugemem Support Local Denial of Service Vulnerability
The Linux kernel is prone to a local denial-of-service vulnerability. This issue is due to a design error in the code that handles support for 'non-hugemem' kernels.
This vulnerability allows local users to cause a kernel panic, denying further service to legitimate users.
The Linux kernel is prone to a local denial-of-service vulnerability. This issue is due to a design error in the code that handles support for 'non-hugemem' kernels.
This vulnerability allows local users to cause a kernel panic, denying further service to legitimate users.
Exploit / POC
Linux Kernel Non-Hugemem Support Local Denial of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Solution / Fix
Linux Kernel Non-Hugemem Support Local Denial of Service Vulnerability
Solution:
Linux kernel patches are available to address this issue.
Please see the references for more information and vendor advisories.
Linux kernel 2.6 -test6
Linux kernel 2.6 -test4
Linux kernel 2.6 -test2
Linux kernel 2.6 -test11
Linux kernel 2.6 -test9-CVS
Linux kernel 2.6
Linux kernel 2.6 -test3
Linux kernel 2.6 -test5
Linux kernel 2.6 -test1
Linux kernel 2.6 -test7
Linux kernel 2.6 -test9
Linux kernel 2.6.1 -rc1
Linux kernel 2.6.10 rc2
Linux kernel 2.6.2
Linux kernel 2.6.4
Linux kernel 2.6.7 rc1
Linux kernel 2.6.7
Linux kernel 2.6.8 rc3
Linux kernel 2.6.8 rc2
Linux kernel 2.6.8 rc1
Solution:
Linux kernel patches are available to address this issue.
Please see the references for more information and vendor advisories.
Linux kernel 2.6 -test6
-
Linux linux-2.6.10.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.10.tar.bz2
Linux kernel 2.6 -test4
-
Linux linux-2.6.10.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.10.tar.bz2
Linux kernel 2.6 -test2
-
Linux linux-2.6.10.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.10.tar.bz2
Linux kernel 2.6 -test11
-
Linux linux-2.6.10.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.10.tar.bz2
Linux kernel 2.6 -test9-CVS
-
Linux linux-2.6.10.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.10.tar.bz2
Linux kernel 2.6
-
Linux linux-2.6.10.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.10.tar.bz2
Linux kernel 2.6 -test3
-
Linux linux-2.6.10.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.10.tar.bz2
Linux kernel 2.6 -test5
-
Linux linux-2.6.10.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.10.tar.bz2
Linux kernel 2.6 -test1
-
Linux linux-2.6.10.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.10.tar.bz2
Linux kernel 2.6 -test7
-
Linux linux-2.6.10.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.10.tar.bz2
Linux kernel 2.6 -test9
-
Linux linux-2.6.10.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.10.tar.bz2
Linux kernel 2.6.1 -rc1
-
Linux linux-2.6.10.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.10.tar.bz2
Linux kernel 2.6.10 rc2
-
Linux linux-2.6.10.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.10.tar.bz2
Linux kernel 2.6.2
-
Linux linux-2.6.10.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.10.tar.bz2
Linux kernel 2.6.4
-
Linux linux-2.6.10.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.10.tar.bz2
Linux kernel 2.6.7 rc1
-
Linux linux-2.6.10.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.10.tar.bz2
Linux kernel 2.6.7
-
Linux linux-2.6.10.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.10.tar.bz2
Linux kernel 2.6.8 rc3
-
Linux linux-2.6.10.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.10.tar.bz2
Linux kernel 2.6.8 rc2
-
Linux linux-2.6.10.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.10.tar.bz2
Linux kernel 2.6.8 rc1
-
Linux linux-2.6.10.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.10.tar.bz2
References
Linux Kernel Non-Hugemem Support Local Denial of Service Vulnerability
References:
References:
- ASA-2006-203 Avaya Security Update (Avaya)
- Important: kernel security update RHSA-2006:0617-15 (Red Hat)
- kernel.org Homepage. (Linux Kernel)