PT-2006-5908 · Linux · Linux Kernel

Publicado 2006-10-17 · Atualizado 2020-08-19 · CVE-2006-5173

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the Linux kernel not properly handling EFLAGS during context switches or when creating new threads. This can be exploited by local users to cause a denial of service, resulting in a process crash. The exploitation can be demonstrated by setting the Alignment Check flag (EFLAGS 0x40000) in a process, which then triggers a SIGBUS in other processes that attempt an unaligned access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-5173

Produtos afetados

Linux Kernel

Referências · 12

• http://secunia.com/advisories/23593 · Nota
• http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=47a5c6fa0e204a2b63309c648bb2fde36836c826 · Nota
• http://secunia.com/advisories/25691 · Nota
• http://secunia.com/advisories/23361 · Nota
• http://mandriva.com/security/advisories?name=MDKSA-2007:002 · Aviso do Fabricante
• http://securityfocus.com/bid/21851 · Nota
• http://securityfocus.com/archive/1/471457 · Nota
• http://ubuntu.com/usn/usn-395-1 · Aviso do Fabricante
• http://secunia.com/advisories/23384 · Nota
• http://novell.com/linux/security/advisories/2006_79_kernel.html · Aviso do Fabricante
• http://secunia.com/advisories/23474 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-5173 · Nota de Segurança