/[kernel-sec]/retired/CVE-2006-5173
ViewVC logotype

Contents of /retired/CVE-2006-5173

Parent Directory Parent Directory | Revision Log Revision Log


Revision 774 - (show annotations) (download)
Mon Apr 30 17:08:05 2007 UTC (6 years ago) by jmm
File size: 1003 byte(s)
retire several issues
1 Candidate: CVE-2006-5173
2 References:
3 http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=47a5c6fa0e204a2b63309c648bb2fde36836c826
4 Description:
5 Alignment Check (AC) flag in EFLAGS is not saved/restored during task
6 switch, thus was leaking to other tasks. Those eventually died with a
7 SIGBUS.
8 Ubuntu-Description:
9 The task switching code did not save and restore EFLAGS of processes.
10 By starting a specially crafted executable, a local attacker could
11 exploit this to eventually crash many other running processes.
12 Notes:
13 incorrect optimization in some later 2.6.x kernel, reverted
14 Local DoS.
15
16 Are we sure this affects 2.6.17 and before? The CFI_ADJUST_CFA_OFFSET
17 doesn't seem to be present in these kernels.
18 Bugs:
19 upstream: released (2.6.18)
20 linux-2.6: released (2.6.18-1)
21 2.6.8-sarge-security: N/A
22 2.4.27-sarge-security: N/A
23 2.6.10-hoary-security: N/A
24 2.6.12-breezy-security: N/A
25 2.6.15-dapper-security: released (2.6.15-27.49)
26 2.6.17-edgy: released (2.6.17.1-10.34)

  ViewVC Help
Powered by ViewVC 1.1.5