PT-2006-2090 · Linux · Linux Kernel

Al Viro · Published 2006-04-05 · Updated 2018-10-03 · CVE-2006-1055

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.6.12 through 2.6.17-rc1

Description The issue is related to the fill write buffer function in sysfs/file.c, which does not properly zero-terminate a buffer when a length of PAGE SIZE or more is requested. This could allow local users to cause a denial of service by triggering an out-of-bounds read, potentially leading to a system crash.

Recommendations For Linux kernel versions 2.6.12 through 2.6.17-rc1, consider updating to a version after 2.6.17-rc1 to resolve the issue. As a temporary workaround, restrict local user access to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2006-1055

Affected Products

Linux Kernel

References · 19

• 🔥 http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=6e0dd741a89be35defa05bd79f4211c5a2762825;hp=597a7679dd83691be2f3a53e1f3f915b4a7f6eba · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-1055 · Security Note
• http://trustix.org/errata/2006/0020 · Vendor Advisory
• http://lwn.net/Alerts/180820 · Vendor Advisory
• http://ubuntu.com/usn/usn-302-1 · Vendor Advisory
• https://usn.ubuntu.com/281-1 · Vendor Advisory
• http://novell.com/linux/security/advisories/2006-05-31.html · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25693 · Note
• http://secunia.com/advisories/19495 · Note
• http://securityfocus.com/bid/17402 · Note
• http://secunia.com/advisories/20398 · Note
• http://osvdb.org/24443 · Note
• http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=6e0dd741a89be35defa05bd79f4211c5a2762825%3Bhp=597a7679dd83691be2f3a53e1f3f915b4a7f6eba · Note
• http://secunia.com/advisories/20716 · Note
• http://vupen.com/english/advisories/2006/1273 · Note