PT-2005-2001 · Linux+1 · Linux Kernel+1

Hugh Dickins

·

Published

2005-04-05

·

Updated

2018-10-19

·

CVE-2005-0977

CVSS v2.0

2.1

Low

VectorAV:L/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Linux kernel version 2.6
Description The issue is related to the shmem nopage function in the tmpfs driver, which does not properly verify the address argument. This allows local users to cause a denial of service, resulting in a kernel crash, by providing an invalid address.
Recommendations For Linux kernel version 2.6, consider applying a patch that properly verifies the address argument in the shmem nopage function to prevent a denial of service.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

CVE-2005-0977
RHSA-2005:366
RHSA-2005_366

Affected Products

Linux Kernel
Red Hat