PT-2006-1094 · Linux · Linux Kernel

Marcel Holtmann + 1 · Publicado 2006-10-13 · Atualizado 2017-11-17 · CVE-2006-5331

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.19

Description: The issue is related to the altivec unavailable exception function in the Linux kernel, which mishandles the case where CONFIG ALTIVEC is defined and the CPU supports Altivec, but the kernel does not detect this support. This can be exploited by local users to cause a denial of service (panic) by executing an Altivec instruction.

Recommendations: For Linux kernel versions prior to 2.6.19, update to version 2.6.19 or later to resolve the issue. As a temporary workaround, consider disabling the execution of Altivec instructions until a patch is available.

Correção

Enumeração de Fraquezas

CWE-19

Identificadores relacionados

BDU:2017-02612

CVE-2006-5331

Produtos afetados

Linux Kernel

Referências · 10

• https://github.com/torvalds/linux/commit/6c4841c2b6c32a134f9f36e5e08857138cc12b10 · Correção
• https://ubuntu.com/security/CVE-2006-5331 · Aviso do Fabricante
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6c4841c2b6c32a134f9f36e5e08857138cc12b10 · Correção
• https://osv.dev/vulnerability/UBUNTU-CVE-2006-5331 · Aviso do Fabricante
• https://bugzilla.suse.com/show_bug.cgi?id=213229 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2006-5331 · Nota de Segurança
• http://linuxgrill.com/anonymous/kernel/v2.6/ChangeLog-2.6.19 · Correção
• https://bdu.fstec.ru/vul/2017-02612 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2006-5331 · Nota de Segurança
• https://xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.7 · Nota