PT-2006-4507 · Linux · Linux Kernel

Publicado 2006-08-04 · Atualizado 2011-01-19 · CVE-2006-3634

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.6.17-rc4 through 2.6.18-rc2

Description The issue concerns the futex atomic op and futex atomic cmpxchg inatomic functions, which perform atomic futex operations in the kernel address space instead of the user address space. This allows local users to cause a denial of service, resulting in a system crash.

Recommendations For Linux kernel versions 2.6.17-rc4 through 2.6.18-rc2, consider upgrading to a version outside of this range to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-3634

Produtos afetados

Linux Kernel

Referências · 3

• http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bafe00cc9297ca77b66e5c83e5e65e17c0c997c8 · Nota
• http://security-tracker.debian.org/tracker/CVE-2006-3634 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3634 · Nota de Segurança