Linux Kernel Prior to 2.6.24.1 'copy_from_user_mmap_sem()' Memory Access Vulnerability
BID:27796
Info
Linux Kernel Prior to 2.6.24.1 'copy_from_user_mmap_sem()' Memory Access Vulnerability
| Bugtraq ID: | 27796 |
| Class: | Access Validation Error |
| CVE: |
CVE-2008-0010 |
| Remote: | No |
| Local: | Yes |
| Published: | Feb 08 2008 12:00AM |
| Updated: | May 07 2015 05:11PM |
| Credit: | Wojciech Purczynskiof iSEC Security Research and qaaz are credited with the discovery of this issue. |
| Vulnerable: |
Turbolinux Turbolinux Server 11 x64 Turbolinux Turbolinux Server 11 Slackware Linux 12.0 Slackware Linux -current Red Hat Fedora 7 Linux kernel 2.6.24 -rc5 Linux kernel 2.6.24 -rc4 Linux kernel 2.6.24 -rc3 Linux kernel 2.6.23 .7 Linux kernel 2.6.23 .6 Linux kernel 2.6.23 .5 Linux kernel 2.6.23 .4 Linux kernel 2.6.23 .3 Linux kernel 2.6.23 .2 Linux kernel 2.6.23 -rc2 Linux kernel 2.6.23 -rc1 Linux kernel 2.6.23 Linux kernel 2.6.22 .8 Linux kernel 2.6.22 .7 Linux kernel 2.6.22 .6 Linux kernel 2.6.22 .5 Linux kernel 2.6.22 .4 Linux kernel 2.6.22 .3 Linux kernel 2.6.22 .2 Linux kernel 2.6.22 .17 Linux kernel 2.6.22 .16 Linux kernel 2.6.22 .15 Linux kernel 2.6.22 .14 Linux kernel 2.6.22 .13 Linux kernel 2.6.22 .12 Linux kernel 2.6.22 .11 Linux kernel 2.6.22 .1 Linux kernel 2.6.22 Linux kernel 2.6.24-rc2 Linux kernel 2.6.24-rc1 Linux kernel 2.6.23.14 Linux kernel 2.6.23.10 Linux kernel 2.6.23.1 Linux kernel 2.6.23.09 Linux kernel 2.6.22-rc7 Linux kernel 2.6.22-rc1 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 |
| Not Vulnerable: |
Linux kernel 2.6.24 .1 |
Discussion
Linux Kernel Prior to 2.6.24.1 'copy_from_user_mmap_sem()' Memory Access Vulnerability
The Linux kernel is prone to a memory-access vulnerability because it fails to adequately validate a user-supplied pointer value.
A local attacker can exploit this issue to read arbitrary memory locations on the affected computer.
This issue affects Linux Kernel 2.6.22 through 2.6.24.
The Linux kernel is prone to a memory-access vulnerability because it fails to adequately validate a user-supplied pointer value.
A local attacker can exploit this issue to read arbitrary memory locations on the affected computer.
This issue affects Linux Kernel 2.6.22 through 2.6.24.
Exploit / POC
Solution / Fix
Linux Kernel Prior to 2.6.24.1 'copy_from_user_mmap_sem()' Memory Access Vulnerability
Solution:
Linux Kernel 2.6.24.1 addresses this issue. Please see the references for more information.
Linux kernel 2.6.23.1
Linux kernel 2.6.23.14
Linux kernel 2.6.24-rc2
Linux kernel 2.6.22-rc7
Linux kernel 2.6.23.09
Linux kernel 2.6.24-rc1
Linux kernel 2.6.23.10
Linux kernel 2.6.22-rc1
Linux kernel 2.6.22 .17
Linux kernel 2.6.22
Linux kernel 2.6.22 .11
Linux kernel 2.6.22 .13
Linux kernel 2.6.22 .14
Linux kernel 2.6.22 .2
Linux kernel 2.6.22 .16
Linux kernel 2.6.22 .4
Linux kernel 2.6.22 .6
Linux kernel 2.6.22 .15
Linux kernel 2.6.22 .1
Linux kernel 2.6.22 .3
Linux kernel 2.6.22 .12
Linux kernel 2.6.22 .8
Linux kernel 2.6.22 .7
Linux kernel 2.6.22 .5
Linux kernel 2.6.23 .5
Linux kernel 2.6.23
Linux kernel 2.6.23 -rc2
Linux kernel 2.6.23 .6
Linux kernel 2.6.23 .7
Linux kernel 2.6.23 -rc1
Linux kernel 2.6.23 .2
Linux kernel 2.6.23 .3
Linux kernel 2.6.23 .4
Linux kernel 2.6.24 -rc4
Linux kernel 2.6.24 -rc3
Linux kernel 2.6.24 -rc5
Solution:
Linux Kernel 2.6.24.1 addresses this issue. Please see the references for more information.
Linux kernel 2.6.23.1
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.23.14
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.24-rc2
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.22-rc7
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.23.09
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.24-rc1
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.23.10
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.22-rc1
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.22 .17
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.22
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.22 .11
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.22 .13
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.22 .14
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.22 .2
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.22 .16
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.22 .4
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.22 .6
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.22 .15
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.22 .1
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.22 .3
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.22 .12
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.22 .8
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.22 .7
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.22 .5
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.23 .5
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.23
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.23 -rc2
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.23 .6
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.23 .7
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.23 -rc1
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.23 .2
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.23 .3
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.23 .4
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.24 -rc4
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.24 -rc3
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
Linux kernel 2.6.24 -rc5
-
Linux patch-2.6.24.1.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/patch-2.6.24.1.bz2
References
Linux Kernel Prior to 2.6.24.1 'copy_from_user_mmap_sem()' Memory Access Vulnerability
References:
References:
- [PATCH] splice: missing user pointer access verification (CVE-2008-0009/10) (Linux)
- Linux 2.6.24.1 Changelog (Kernel.org)
- CSA-L03: Linux kernel vmsplice unchecked user-pointer dereference (Wojciech Purczynski)