Info

Disclosure

Feb 27, 2006

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

The Linux kernel contains a flaw that may allow a local denial of service. The issue is triggered because the 'die_if_kernel()' function is labeled with the 'noreturn' attribute. On Intel ia64 systems, this can lead to a kernel panic when user faults are caused, which will result in loss of availability for the platform.

Classification

Location: Local Access Required
Attack Type: Denial of Service
Impact: Loss of Availability
Exploit: Exploit Unknown
Disclosure: OSVDB Verified, Vendor Verified

Solution

Upgrade to version 2.6.15.6 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Linux

Kernel

2.6.15.5

References

Bugtraq ID: 16993
Secunia Advisory ID: 19078 19220 19607 20398 20671 21136 21465 21983 22417
CVE ID: 2006-0742 (see also: NVD)
SCIP VulDB ID: 2074
VUPEN Advisory: ADV-2006-0856
Vendor Specific Advisory URL: ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U.asc http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm
http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm
http://www.novell.com/linux/security/advisories/2006-05-31.html
http://www.ubuntu.com/usn/usn-263-1
Vendor URL: http://www.kernel.org/
Vendor Specific News/Changelog Entry: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15.6
Other Advisory URL: http://www.us.debian.org/security/2006/dsa-1097
RedHat RHSA: RHSA-2006:0437 RHSA-2006:0575

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/23660