PT-2005-1943 · Linux · Linux Kernel

Publicado 2005-03-29 · Atualizado 2008-09-05 · CVE-2005-0916

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel version 2.6.11

Description The issue allows local users to cause a denial of service, resulting in a system panic. This occurs when a process executes the io queue init function but exits without running io queue release, causing exit aio and is hugepage only range to fail. This is specifically a concern on PPC64 or IA64 architectures with CONFIG HUGETLB PAGE enabled.

Recommendations For Linux kernel version 2.6.11, ensure that all processes properly release resources by running io queue release after io queue init to prevent system panic. As a temporary workaround, consider restricting access to the io queue init function on affected architectures until a proper fix is applied.

Exploit

Correção

Identificadores relacionados

CVE-2005-0916

Produtos afetados

Linux Kernel

Referências · 6

• 🔥 https://exploit-db.com/exploits/911 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-0916 · Nota de Segurança
• http://groups-beta.google.com/group/linux.kernel/browse_thread/thread/13b43bd5783842f6/7ce3c5a514a497ab?q=io_queue_init&rnum=3#7ce3c5a514a497ab · Nota
• http://novell.com/linux/security/advisories/2005_50_kernel.html · Aviso do Fabricante
• http://linux.bkbits.net:8080/linux-2.6/cset%404248c8c0es30_4YVdwa6vteKi7h_nw · Nota
• http://securityfocus.com/bid/12987 · Nota