PT-2005-1943 · Linux · Linux Kernel

Published 2005-03-29 · Updated 2008-09-05 · CVE-2005-0916

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel version 2.6.11

Description The issue allows local users to cause a denial of service, resulting in a system panic. This occurs when a process executes the io queue init function but exits without running io queue release, causing exit aio and is hugepage only range to fail. This is specifically a concern on PPC64 or IA64 architectures with CONFIG HUGETLB PAGE enabled.

Recommendations For Linux kernel version 2.6.11, ensure that all processes properly release resources by running io queue release after io queue init to prevent system panic. As a temporary workaround, consider restricting access to the io queue init function on affected architectures until a proper fix is applied.

Exploit

Fix

Related Identifiers

CVE-2005-0916

Affected Products

Linux Kernel

References · 6

• 🔥 https://exploit-db.com/exploits/911 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-0916 · Security Note
• http://novell.com/linux/security/advisories/2005_50_kernel.html · Vendor Advisory
• http://groups-beta.google.com/group/linux.kernel/browse_thread/thread/13b43bd5783842f6/7ce3c5a514a497ab?q=io_queue_init&rnum=3#7ce3c5a514a497ab · Note
• http://linux.bkbits.net:8080/linux-2.6/cset%404248c8c0es30_4YVdwa6vteKi7h_nw · Note
• http://securityfocus.com/bid/12987 · Note