Multiple Linux Kernel 2.2 Security Vulnerabilities

Bugtraq ID:	5984
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Oct 17 2002 12:00AM
Updated:	Oct 17 2002 12:00AM
Credit:	Credited to Silvio Cesare and Solar Designer. Announced in a RedHat security advisory.
Vulnerable:	Linux kernel 2.2.21 Linux kernel 2.2.20 + Mandriva Linux Mandrake 8.2 ppc + Mandriva Linux Mandrake 8.2 Linux kernel 2.2.19 + EnGarde Secure Linux 1.0.1 + Immunix Immunix OS 7+ + MandrakeSoft Single Network Firewall 7.2 + Mandriva Linux Mandrake 8.1 + Mandriva Linux Mandrake 8.0 ppc + Mandriva Linux Mandrake 8.0 + SuSE Linux 7.0 + SuSE Linux 6.4 + SuSE Linux 6.3 + Trustix Secure Linux 1.5 Linux kernel 2.2.18 + Caldera OpenLinux 2.4 + Debian Linux 2.2 sparc + Debian Linux 2.2 powerpc + Debian Linux 2.2 arm + Debian Linux 2.2 alpha + Debian Linux 2.2 68k + Debian Linux 2.2 + Mandriva Linux Mandrake 7.2 + Mandriva Linux Mandrake 7.1 + Mandriva Linux Mandrake 7.0 + Mandriva Linux Mandrake 6.1 + Mandriva Linux Mandrake 6.0 + Redhat Linux 7.0 sparc + Redhat Linux 7.0 i386 + Redhat Linux 7.0 alpha + Redhat Linux 6.2 sparc + Redhat Linux 6.2 i386 + Redhat Linux 6.2 alpha + Redhat Linux 6.1 sparc + Redhat Linux 6.1 i386 + Redhat Linux 6.1 alpha + Redhat Linux 6.0 sparc + Redhat Linux 6.0 alpha + Redhat Linux 6.0 + SCO eDesktop 2.4 + SCO eServer 2.3.1 + Slackware Linux 7.1 + Slackware Linux 7.0 + Slackware Linux 4.0 + SuSE Linux 7.0 + SuSE Linux 6.4 ppc + SuSE Linux 6.4 alpha + SuSE Linux 6.4 + SuSE Linux 6.3 ppc + SuSE Linux 6.3 alpha + SuSE Linux 6.3 + SuSE Linux 6.1 alpha + SuSE Linux 6.1 + SuSE Linux 6.0 + Wirex Immunix OS 7.0 -Beta + Wirex Immunix OS 7.0 + Wirex Immunix OS 6.2 Linux kernel 2.2.17 + Mandriva Linux Mandrake 7.2 + SuSE Linux 7.0 + Trustix Secure Linux 1.2 Linux kernel 2.2.16 + Redhat Linux 7.0 + Sun Cobalt Qube 3 + Sun Cobalt RaQ XTR + Trustix Secure Linux 1.1 Linux kernel 2.2.15 + MandrakeSoft Corporate Server 1.0.1 + Mandriva Linux Mandrake 7.1 Linux kernel 2.2.14 + Redhat Linux 6.2 + SCO eDesktop 2.4 + SCO eServer 2.3.1 + Sun Cobalt RaQ 4 Linux kernel 2.2.13 + SuSE Linux 6.4 + SuSE Linux 6.3 Linux kernel 2.2.12 Linux kernel 2.2.11 Linux kernel 2.2.10 + Caldera OpenLinux 2.3 Linux kernel 2.2.9 Linux kernel 2.2.8 Linux kernel 2.2.7 Linux kernel 2.2.6 Linux kernel 2.2.5 Linux kernel 2.2.4 Linux kernel 2.2.3 Linux kernel 2.2.2 Linux kernel 2.2.1
Not Vulnerable:	Linux kernel 2.2.22 + Trustix Secure Linux 1.5 + Trustix Secure Linux 1.2 + Trustix Secure Linux 1.1

Multiple Linux Kernel 2.2 Security Vulnerabilities

Red Hat has issued an advisory reporting the correction of several vulnerabilities in version 2.2 of the Linux kernel.

It should be assumed that at the very least, local attackers may exploit these vulnerabilities to elevate privileges. The vulnerabilities are reported to be related to sign handling, maths overflows and casting errors.

These vulnerabilities may be related to the vulnerabilities described in BugTraq ID 5983.

Multiple Linux Kernel 2.2 Security Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Multiple Linux Kernel 2.2 Security Vulnerabilities

Solution:
It appears as though these issues have been addressed in the Linux 2.2.22 kernel.

Fixes available:


Linux kernel 2.2.14

• RedHat kernel-2.2.22-6.2.2.alpha.rpm
  ftp://updates.redhat.com/6.2/en/os/alpha/kernel-2.2.22-6.2.2.alpha.rpm


• RedHat kernel-2.2.22-6.2.2.i386.rpm
  ftp://updates.redhat.com/6.2/en/os/i386/kernel-2.2.22-6.2.2.i386.rpm


• RedHat kernel-2.2.22-6.2.2.i586.rpm
  ftp://updates.redhat.com/6.2/en/os/i586/kernel-2.2.22-6.2.2.i586.rpm


• RedHat kernel-2.2.22-6.2.2.i686.rpm
  ftp://updates.redhat.com/6.2/en/os/i686/kernel-2.2.22-6.2.2.i686.rpm


• RedHat kernel-2.2.22-6.2.2.src.rpm
  ftp://updates.redhat.com/6.2/en/os/SRPMS/kernel-2.2.22-6.2.2.src.rpm


• RedHat kernel-BOOT-2.2.22-6.2.2.alpha.rpm
  ftp://updates.redhat.com/6.2/en/os/alpha/kernel-BOOT-2.2.22-6.2.2.alph a.rpm


• RedHat kernel-BOOT-2.2.22-6.2.2.i386.rpm
  ftp://updates.redhat.com/6.2/en/os/i386/kernel-BOOT-2.2.22-6.2.2.i386. rpm


• RedHat kernel-doc-2.2.22-6.2.2.alpha.rpm
  ftp://updates.redhat.com/6.2/en/os/alpha/kernel-doc-2.2.22-6.2.2.alpha .rpm


• RedHat kernel-doc-2.2.22-6.2.2.i386.rpm
  ftp://updates.redhat.com/6.2/en/os/i386/kernel-doc-2.2.22-6.2.2.i386.r pm


• RedHat kernel-enterprise-2.2.22-6.2.2.alpha.rpm
  ftp://updates.redhat.com/6.2/en/os/alpha/kernel-enterprise-2.2.22-6.2. 2.alpha.rpm


• RedHat kernel-enterprise-2.2.22-6.2.2.i686.rpm
  ftp://updates.redhat.com/6.2/en/os/i686/kernel-enterprise-2.2.22-6.2.2 .i686.rpm


• RedHat kernel-headers-2.2.22-6.2.2.alpha.rpm
  ftp://updates.redhat.com/6.2/en/os/alpha/kernel-headers-2.2.22-6.2.2.a lpha.rpm


• RedHat kernel-headers-2.2.22-6.2.2.i386.rpm
  ftp://updates.redhat.com/6.2/en/os/i386/kernel-headers-2.2.22-6.2.2.i3 86.rpm


• RedHat kernel-ibcs-2.2.22-6.2.2.i386.rpm
  ftp://updates.redhat.com/6.2/en/os/i386/kernel-ibcs-2.2.22-6.2.2.i386. rpm


• RedHat kernel-jensen-2.2.22-6.2.2.alpha.rpm
  ftp://updates.redhat.com/6.2/en/os/alpha/kernel-jensen-2.2.22-6.2.2.al pha.rpm


• RedHat kernel-pcmcia-cs-2.2.22-6.2.2.i386.rpm
  ftp://updates.redhat.com/6.2/en/os/i386/kernel-pcmcia-cs-2.2.22-6.2.2. i386.rpm


• RedHat kernel-smp-2.2.22-6.2.2.alpha.rpm
  ftp://updates.redhat.com/6.2/en/os/alpha/kernel-smp-2.2.22-6.2.2.alpha .rpm


• RedHat kernel-smp-2.2.22-6.2.2.i386.rpm
  ftp://updates.redhat.com/6.2/en/os/i386/kernel-smp-2.2.22-6.2.2.i386.r pm


• RedHat kernel-smp-2.2.22-6.2.2.i586.rpm
  ftp://updates.redhat.com/6.2/en/os/i586/kernel-smp-2.2.22-6.2.2.i586.r pm


• RedHat kernel-smp-2.2.22-6.2.2.i686.rpm
  ftp://updates.redhat.com/6.2/en/os/i686/kernel-smp-2.2.22-6.2.2.i686.r pm


• RedHat kernel-source-2.2.22-6.2.2.alpha.rpm
  ftp://updates.redhat.com/6.2/en/os/alpha/kernel-source-2.2.22-6.2.2.al pha.rpm


• RedHat kernel-source-2.2.22-6.2.2.i386.rpm
  ftp://updates.redhat.com/6.2/en/os/i386/kernel-source-2.2.22-6.2.2.i38 6.rpm


• RedHat kernel-utils-2.2.22-6.2.2.alpha.rpm
  ftp://updates.redhat.com/6.2/en/os/alpha/kernel-utils-2.2.22-6.2.2.alp ha.rpm


• RedHat kernel-utils-2.2.22-6.2.2.i386.rpm
  ftp://updates.redhat.com/6.2/en/os/i386/kernel-utils-2.2.22-6.2.2.i386 .rpm

Linux kernel 2.2.16

• RedHat kernel-2.2.22-7.0.2.alpha.rpm
  ftp://updates.redhat.com/7.0/en/os/alpha/kernel-2.2.22-7.0.2.alpha.rpm


• RedHat kernel-2.2.22-7.0.2.i386.rpm
  ftp://updates.redhat.com/7.0/en/os/i386/kernel-2.2.22-7.0.2.i386.rpm


• RedHat kernel-2.2.22-7.0.2.i586.rpm
  ftp://updates.redhat.com/7.0/en/os/i586/kernel-2.2.22-7.0.2.i586.rpm


• RedHat kernel-2.2.22-7.0.2.i686.rpm
  ftp://updates.redhat.com/7.0/en/os/i686/kernel-2.2.22-7.0.2.i686.rpm


• RedHat kernel-2.2.22-7.0.2.src.rpm
  ftp://updates.redhat.com/7.0/en/os/SRPMS/kernel-2.2.22-7.0.2.src.rpm


• RedHat kernel-BOOT-2.2.22-7.0.2.alpha.rpm
  ftp://updates.redhat.com/7.0/en/os/alpha/kernel-BOOT-2.2.22-7.0.2.alph a.rpm


• RedHat kernel-BOOT-2.2.22-7.0.2.i386.rpm
  ftp://updates.redhat.com/7.0/en/os/i386/kernel-BOOT-2.2.22-7.0.2.i386. rpm


• RedHat kernel-doc-2.2.22-7.0.2.alpha.rpm
  ftp://updates.redhat.com/7.0/en/os/alpha/kernel-doc-2.2.22-7.0.2.alpha .rpm


• RedHat kernel-doc-2.2.22-7.0.2.i386.rpm
  ftp://updates.redhat.com/7.0/en/os/i386/kernel-doc-2.2.22-7.0.2.i386.r pm


• RedHat kernel-enterprise-2.2.22-7.0.2.alpha.rpm
  ftp://updates.redhat.com/7.0/en/os/alpha/kernel-enterprise-2.2.22-7.0. 2.alpha.rpm


• RedHat kernel-enterprise-2.2.22-7.0.2.i686.rpm
  ftp://updates.redhat.com/7.0/en/os/i686/kernel-enterprise-2.2.22-7.0.2 .i686.rpm


• RedHat kernel-ibcs-2.2.22-7.0.2.i386.rpm
  ftp://updates.redhat.com/7.0/en/os/i386/kernel-ibcs-2.2.22-7.0.2.i386. rpm


• RedHat kernel-jensen-2.2.22-7.0.2.alpha.rpm
  ftp://updates.redhat.com/7.0/en/os/alpha/kernel-jensen-2.2.22-7.0.2.al pha.rpm


• RedHat kernel-pcmcia-cs-2.2.22-7.0.2.i386.rpm
  ftp://updates.redhat.com/7.0/en/os/i386/kernel-pcmcia-cs-2.2.22-7.0.2. i386.rpm


• RedHat kernel-smp-2.2.22-7.0.2.alpha.rpm
  ftp://updates.redhat.com/7.0/en/os/alpha/kernel-smp-2.2.22-7.0.2.alpha .rpm


• RedHat kernel-smp-2.2.22-7.0.2.i386.rpm
  ftp://updates.redhat.com/7.0/en/os/i386/kernel-smp-2.2.22-7.0.2.i386.r pm


• RedHat kernel-smp-2.2.22-7.0.2.i586.rpm
  ftp://updates.redhat.com/7.0/en/os/i586/kernel-smp-2.2.22-7.0.2.i586.r pm


• RedHat kernel-smp-2.2.22-7.0.2.i686.rpm
  ftp://updates.redhat.com/7.0/en/os/i686/kernel-smp-2.2.22-7.0.2.i686.r pm


• RedHat kernel-source-2.2.22-7.0.2.alpha.rpm
  ftp://updates.redhat.com/7.0/en/os/alpha/kernel-source-2.2.22-7.0.2.al pha.rpm


• RedHat kernel-source-2.2.22-7.0.2.i386.rpm
  ftp://updates.redhat.com/7.0/en/os/i386/kernel-source-2.2.22-7.0.2.i38 6.rpm


• RedHat kernel-utils-2.2.22-7.0.2.alpha.rpm
  ftp://updates.redhat.com/7.0/en/os/alpha/kernel-utils-2.2.22-7.0.2.alp ha.rpm


• RedHat kernel-utils-2.2.22-7.0.2.i386.rpm
  ftp://updates.redhat.com/7.0/en/os/i386/kernel-utils-2.2.22-7.0.2.i386 .rpm


• Trustix kernel-2.2.22-4tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.1/RPMS/kernel-2.2.22-4tr.i 586.rpm


• Trustix kernel-BOOT-2.2.22-4tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.1/RPMS/kernel-BOOT-2.2.22- 4tr.i586.rpm


• Trustix kernel-doc-2.2.22-4tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.1/RPMS/kernel-doc-2.2.22-4 tr.i586.rpm


• Trustix kernel-headers-2.2.22-4tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.1/RPMS/kernel-headers-2.2. 22-4tr.i586.rpm


• Trustix kernel-smp-2.2.22-4tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.1/RPMS/kernel-smp-2.2.22-4 tr.i586.rpm


• Trustix kernel-source-2.2.22-4tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.1/RPMS/kernel-source-2.2.2 2-4tr.i586.rpm


• Trustix kernel-utils-2.2.22-4tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.1/RPMS/kernel-utils-2.2.22 -4tr.i586.rpm

Linux kernel 2.2.17

• Trustix kernel-2.2.22-4tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.2/RPMS/kernel-2.2.22-4tr.i 586.rpm


• Trustix kernel-BOOT-2.2.22-4tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.2/RPMS/kernel-BOOT-2.2.22- 4tr.i586.rpm


• Trustix kernel-doc-2.2.22-4tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.2/RPMS/kernel-doc-2.2.22-4 tr.i586.rpm


• Trustix kernel-headers-2.2.22-4tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.2/RPMS/kernel-headers-2.2. 22-4tr.i586.rpm


• Trustix kernel-smp-2.2.22-4tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.2/RPMS/kernel-smp-2.2.22-4 tr.i586.rpm


• Trustix kernel-source-2.2.22-4tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.2/RPMS/kernel-source-2.2.2 2-4tr.i586.rpm


• Trustix kernel-utils-2.2.22-4tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.2/RPMS/kernel-utils-2.2.22 -4tr.i586.rpm

Linux kernel 2.2.19

• EnGarde Secure Linux kernel-2.2.19-1.0.28.i386.rpm
  ftp://ftp.engardelinux.org/pub/engarde/stable/updates/i386/kernel-2.2. 19-1.0.28.i386.rpm


• EnGarde Secure Linux kernel-2.2.19-1.0.28.i686.rpm
  ftp://ftp.engardelinux.org/pub/engarde/stable/updates/i686/kernel-2.2. 19-1.0.28.i686.rpm


• EnGarde Secure Linux kernel-lids-mods-2.2.19-1.0.28.i386.rpm
  ftp://ftp.engardelinux.org/pub/engarde/stable/updates/i386/kernel-lids -mods-2.2.19-1.0.28.i386.rpm


• EnGarde Secure Linux kernel-lids-mods-2.2.19-1.0.28.i686.rpm
  ftp://ftp.engardelinux.org/pub/engarde/stable/updates/i686/kernel-lids -mods-2.2.19-1.0.28.i686.rpm


• EnGarde Secure Linux kernel-smp-lids-mods-2.2.19-1.0.28.i386.rpm
  ftp://ftp.engardelinux.org/pub/engarde/stable/updates/i386/kernel-smp- lids-mods-2.2.19-1.0.28.i386.rpm


• EnGarde Secure Linux kernel-smp-lids-mods-2.2.19-1.0.28.i686.rpm
  ftp://ftp.engardelinux.org/pub/engarde/stable/updates/i686/kernel-smp- lids-mods-2.2.19-1.0.28.i686.rpm


• EnGarde Secure Linux kernel-smp-mods-2.2.19-1.0.28.i386.rpm
  ftp://ftp.engardelinux.org/pub/engarde/stable/updates/i386/kernel-smp- mods-2.2.19-1.0.28.i386.rpm


• EnGarde Secure Linux kernel-smp-mods-2.2.19-1.0.28.i686.rpm
  ftp://ftp.engardelinux.org/pub/engarde/stable/updates/i686/kernel-smp- mods-2.2.19-1.0.28.i686.rpm


• Trustix kernel-2.2.22-4tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/kernel-2.2.22-4tr.i 586.rpm


• Trustix kernel-BOOT-2.2.22-4tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/kernel-BOOT-2.2.22- 4tr.i586.rpm


• Trustix kernel-doc-2.2.22-4tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/kernel-doc-2.2.22-4 tr.i586.rpm


• Trustix kernel-headers-2.2.22-4tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/kernel-headers-2.2. 22-4tr.i586.rpm


• Trustix kernel-smp-2.2.22-4tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/kernel-smp-2.2.22-4 tr.i586.rpm


• Trustix kernel-source-2.2.22-4tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/kernel-source-2.2.2 2-4tr.i586.rpm


• Trustix kernel-utils-2.2.22-4tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/kernel-utils-2.2.22 -4tr.i586.rpm

Multiple Linux Kernel 2.2 Security Vulnerabilities

References: