OSVDB ID: 26947

Title: Linux Kernel run_posix_cpu_timers Process Timer Local DoS

Info

Disclosure

Jun 15, 2006

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

The Linux kernel contains a flaw that may allow a local denial of service. The issue is triggered because a CPU could attach a timer to a currently exiting process, which will result in a kernel 'oops' and therefore in loss of availability for the platform.

Classification

Location: Local Access Required
Attack Type: Denial of Service, Race Condition
Impact: Loss of Availability
Exploit: Exploit Rumored
Disclosure: OSVDB Verified, Vendor Verified

Solution

Upgrade to version 2.6.16.21 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Linux

Kernel

2.6.16.20

References

Credit

  • John Stultz - johnstulus.ibm.com -


Direct URL: http://osvdb.org/26947