PT-2005-3507 · Linux · Linux Kernel

Published 2005-08-17 · Updated 2008-09-05 · CVE-2005-2617

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.6.12 and later

Description The issue is related to the syscall32 setup pages function in syscall32.c, which does not properly check the return value of the insert vm struct function on 64-bit x86 platforms. This allows local users to cause a memory leak by using a 32-bit application with specially crafted ELF headers.

Recommendations For Linux kernel versions 2.6.12 and later, consider applying a patch that properly checks the return value of the insert vm struct function to prevent memory leaks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-2617

Affected Products

Linux Kernel

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2005-2617 · Security Note
• http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=9fb1759a3102c26cd8f64254a7c3e532782c2bb8 · Note
• http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9fb1759a3102c26cd8f64254a7c3e532782c2bb8 · Note