Info

Disclosure

Feb 12, 2006

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Linux Kernel on ia64 contains a flaw that may allow a local denial of service. The issue is triggered when preemption is having multiple tasks doing ptrace singlesteps around the same time, and will result in loss of availability for the platform.

Classification

Location: Local Access Required
Attack Type: Denial of Service
Impact: Loss of Availability
Exploit: Exploit Unknown
Disclosure: OSVDB Verified, Vendor Verified

Solution

Upgrade to version 2.6.16-rc3 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Linux

Kernel

2.6.16-rc2

References

Bugtraq ID: 17216
Secunia Advisory ID: 19374 19955 21614
CVE ID: 2006-1066 (see also: NVD)
Mail List Post: http://marc.theaimsgroup.com/?l=linux-kernel&m=113932292516359&w=2
Vendor Specific Advisory URL: http://www.debian.org/security/2006/dsa-1017
http://www.mandriva.com/security/advisories?name=MDKSA-2006:151
Vendor Specific News/Changelog Entry: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16
http://www.ubuntu.com/usn/usn-281-1

Credit

John Blackwood - john.blackwoodccur.com - Concurrent Computer Corp.

Direct URL: http://osvdb.org/24098