PT-2006-5908 · Linux · Linux Kernel

Published 2006-10-17 · Updated 2020-08-19 · CVE-2006-5173

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the Linux kernel not properly handling EFLAGS during context switches or when creating new threads. This can be exploited by local users to cause a denial of service, resulting in a process crash. The exploitation can be demonstrated by setting the Alignment Check flag (EFLAGS 0x40000) in a process, which then triggers a SIGBUS in other processes that attempt an unaligned access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-5173

Affected Products

Linux Kernel

References · 12

• http://mandriva.com/security/advisories?name=MDKSA-2007:002 · Vendor Advisory
• http://ubuntu.com/usn/usn-395-1 · Vendor Advisory
• http://novell.com/linux/security/advisories/2006_79_kernel.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-5173 · Security Note
• http://secunia.com/advisories/23593 · Note
• http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=47a5c6fa0e204a2b63309c648bb2fde36836c826 · Note
• http://secunia.com/advisories/25691 · Note
• http://secunia.com/advisories/23361 · Note
• http://securityfocus.com/bid/21851 · Note
• http://securityfocus.com/archive/1/471457 · Note
• http://secunia.com/advisories/23384 · Note
• http://secunia.com/advisories/23474 · Note