Linux Kernel Direct-IO.C Local Denial of Service Vulnerability
BID:19665
Info
Linux Kernel Direct-IO.C Local Denial of Service Vulnerability
| Bugtraq ID: | 19665 |
| Class: | Design Error |
| CVE: |
CVE-2004-2660 |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 22 2006 12:00AM |
| Updated: | Dec 18 2006 09:03PM |
| Credit: | iwamoto is credited with discovering this issue. |
| Vulnerable: |
Redhat Enterprise Linux WS 4 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux AS 4 Redhat Enterprise Linux Desktop version 4 Linux kernel 2.6.1 -rc2 Linux kernel 2.6.1 -rc1 Linux kernel 2.6.1 Linux kernel 2.6 .10 Linux kernel 2.6 -test9-CVS Linux kernel 2.6 -test9 Linux kernel 2.6 -test8 Linux kernel 2.6 -test7 Linux kernel 2.6 -test6 Linux kernel 2.6 -test5 Linux kernel 2.6 -test4 Linux kernel 2.6 -test3 Linux kernel 2.6 -test2 Linux kernel 2.6 -test11 Linux kernel 2.6 -test10 Linux kernel 2.6 -test1 Linux kernel 2.6 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 Avaya S8710 CM 3.1 Avaya S8700 CM 3.1 Avaya S8500 CM 3.1 Avaya S8300 CM 3.1 |
| Not Vulnerable: |
Linux kernel 2.6.10 |
Discussion
Linux Kernel Direct-IO.C Local Denial of Service Vulnerability
The Linux kernel is prone to a local denial-of-service vulnerability. This issue is due to a design error in the direct IO driver.
This vulnerability allows local users to cause a kernel panic, denying further service to legitimate users.
This issue affects the Linux kernel 2.6 series prior to 2.6.10.
The Linux kernel is prone to a local denial-of-service vulnerability. This issue is due to a design error in the direct IO driver.
This vulnerability allows local users to cause a kernel panic, denying further service to legitimate users.
This issue affects the Linux kernel 2.6 series prior to 2.6.10.
Exploit / POC
Linux Kernel Direct-IO.C Local Denial of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Solution / Fix
Linux Kernel Direct-IO.C Local Denial of Service Vulnerability
Solution:
Linux kernel version 2.6.10 is available to address this issue.
Please see the references for more information and vendor advisories.
Linux kernel 2.6 -test6
Linux kernel 2.6 -test1
Linux kernel 2.6 -test4
Linux kernel 2.6 -test7
Linux kernel 2.6 -test9
Linux kernel 2.6 -test2
Linux kernel 2.6 -test8
Linux kernel 2.6 -test11
Linux kernel 2.6 -test10
Linux kernel 2.6 -test9-CVS
Linux kernel 2.6
Linux kernel 2.6 -test3
Linux kernel 2.6 .10
Linux kernel 2.6 -test5
Linux kernel 2.6.1 -rc1
Linux kernel 2.6.1 -rc2
Linux kernel 2.6.1
Solution:
Linux kernel version 2.6.10 is available to address this issue.
Please see the references for more information and vendor advisories.
Linux kernel 2.6 -test6
-
Linux linux-2.6.17.10.tar.gz
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.10.tar.gz
Linux kernel 2.6 -test1
-
Linux linux-2.6.17.10.tar.gz
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.10.tar.gz
Linux kernel 2.6 -test4
-
Linux linux-2.6.17.10.tar.gz
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.10.tar.gz
Linux kernel 2.6 -test7
-
Linux linux-2.6.17.10.tar.gz
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.10.tar.gz
Linux kernel 2.6 -test9
-
Linux linux-2.6.17.10.tar.gz
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.10.tar.gz
Linux kernel 2.6 -test2
-
Linux linux-2.6.17.10.tar.gz
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.10.tar.gz
Linux kernel 2.6 -test8
-
Linux linux-2.6.17.10.tar.gz
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.10.tar.gz
Linux kernel 2.6 -test11
-
Linux linux-2.6.17.10.tar.gz
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.10.tar.gz
Linux kernel 2.6 -test10
-
Linux linux-2.6.17.10.tar.gz
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.10.tar.gz
Linux kernel 2.6 -test9-CVS
-
Linux linux-2.6.17.10.tar.gz
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.10.tar.gz
Linux kernel 2.6
-
Linux linux-2.6.17.10.tar.gz
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.10.tar.gz
Linux kernel 2.6 -test3
-
Linux linux-2.6.17.10.tar.gz
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.10.tar.gz
Linux kernel 2.6 .10
-
Linux linux-2.6.17.10.tar.gz
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.10.tar.gz
Linux kernel 2.6 -test5
-
Linux linux-2.6.17.10.tar.gz
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.10.tar.gz
Linux kernel 2.6.1 -rc1
-
Linux linux-2.6.17.10.tar.gz
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.10.tar.gz
Linux kernel 2.6.1 -rc2
-
Linux linux-2.6.17.10.tar.gz
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.10.tar.gz
Linux kernel 2.6.1
-
Linux linux-2.6.17.10.tar.gz
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.17.10.tar.gz
References
Linux Kernel Direct-IO.C Local Denial of Service Vulnerability
References:
References:
- kernel.org Homepage. (Linux Kernel)