Linux Kernel UnMap_HugePage_Area Local Denial of Service Vulnerability

Bugtraq ID:	20362
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2005-4811
Remote:	No
Local:	Yes
Published:	Aug 05 2005 12:00AM
Updated:	Jun 18 2007 04:09PM
Credit:	This issue was discovered by David Gibson <[email protected]>.
Vulnerable:	Redhat Enterprise Linux WS 4 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux AS 4 Redhat Desktop 4.0 Linux kernel 2.6.12 .6 Linux kernel 2.6.12 .5 Linux kernel 2.6.12 .4 Linux kernel 2.6.12 .3 Linux kernel 2.6.12 .2 Linux kernel 2.6.12 .1 Linux kernel 2.6.12 -rc5 Linux kernel 2.6.12 -rc4 Linux kernel 2.6.12 -rc1 Linux kernel 2.6.12 Linux kernel 2.6.11 .8 Linux kernel 2.6.11 .7 Linux kernel 2.6.11 .6 Linux kernel 2.6.11 .5 Linux kernel 2.6.11 .4 Linux kernel 2.6.11 .12 Linux kernel 2.6.11 .11 Linux kernel 2.6.11 -rc4 Linux kernel 2.6.11 -rc3 Linux kernel 2.6.11 -rc2 Linux kernel 2.6.11 + Redhat Fedora Core4 Linux kernel 2.6.10 rc2 Linux kernel 2.6.10 + Redhat Fedora Core3 + Redhat Fedora Core2 + Trustix Secure Linux 3.0 + Ubuntu Ubuntu Linux 5.0 4 powerpc + Ubuntu Ubuntu Linux 5.0 4 i386 + Ubuntu Ubuntu Linux 5.0 4 amd64 Linux kernel 2.6.1 -rc2 Linux kernel 2.6.1 -rc1 Linux kernel 2.6.1 Linux kernel 2.6 .10 Linux kernel 2.6 -test9-CVS Linux kernel 2.6 -test9 Linux kernel 2.6 -test8 Linux kernel 2.6 -test7 Linux kernel 2.6 -test6 Linux kernel 2.6 -test5 Linux kernel 2.6 -test4 Linux kernel 2.6 -test3 Linux kernel 2.6 -test2 Linux kernel 2.6 -test11 Linux kernel 2.6 -test10 Linux kernel 2.6 -test1 Linux kernel 2.6 Linux kernel 2.6.11.4 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 Avaya S8710 R2.0.1 Avaya S8710 R2.0.0 Avaya S8710 CM 3.1 Avaya S8700 R2.0.1 Avaya S8700 R2.0.0 Avaya S8700 CM 3.1 Avaya S8500 R2.0.1 Avaya S8500 R2.0.0 Avaya S8500 CM 3.1 Avaya S8500 0 Avaya S8300 R2.0.1 Avaya S8300 R2.0.0 Avaya S8300 CM 3.1 Avaya S8300 0 Avaya Messaging Storage Server MM3.0 Avaya CCS 3.0 Avaya CCS 2.0
Not Vulnerable:	Linux kernel 2.6.13

Linux Kernel UnMap_HugePage_Area Local Denial of Service Vulnerability

The Linux kernel is prone to a local denial-of-service vulnerability because the kernel fails to properly handle unexpected errors.

Exploiting this issue allows local, unprivileged attackers to cause kernel crashes, denying service to legitimate users.

Linux kernel versions 2.6.0 through 2.6.12 are vulnerable to this issue.

Linux Kernel UnMap_HugePage_Area Local Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Linux Kernel UnMap_HugePage_Area Local Denial of Service Vulnerability

Solution:
Linux kernel version 2.6.13 is available to address this issue.

Please see the references for more information and advisories.


Linux kernel 2.6.11.4

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6 -test6

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6 -test4

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6 -test2

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6 -test11

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6 -test9-CVS

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6 -test3

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6 .10

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6 -test5

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6 -test1

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6 -test7

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6 -test9

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6 -test8

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6 -test10

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6.1 -rc1

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6.1 -rc2

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6.1

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6.10 rc2

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6.10

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6.11

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6.11 .6

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6.11 .12

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6.11 -rc2

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6.11 .5

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6.11 -rc3

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6.11 -rc4

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6.11 .11

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6.11 .4

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6.11 .7

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6.11 .8

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6.12 .4

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6.12 .3

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6.12 .1

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6.12 .5

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6.12 -rc4

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6.12 .2

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6.12 .6

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6.12 -rc5

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6.12

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux kernel 2.6.12 -rc1

• Linux linux-2.6.13.tar.bz2
  http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.13.tar.bz2

Linux Kernel UnMap_HugePage_Area Local Denial of Service Vulnerability

References:

• [PATCH] Fix hugepage crash on failing mmap() (David Gibson)
  
• Bugzilla Bug 165345: CVE-2005-4811 Hugepage crash on failing mmap() (Red Hat)
  
• Linux 2.6.13 ChangeLog (Linux Kernel)
  
• RHSA-2006:0689-15 - kernel security update (Red Hat)
  
• Avaya Security Advisory ASA-2006-249 (Avaya Inc. )