CVE-2006-5173 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2006-5173
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-5173

Description: Linux kernel does not properly save or restore EFLAGS during a context switch, or reset the flags when creating new threads, which allows local users to cause a denial of service (process crash), as demonstrated using a process that sets the Alignment Check flag (EFLAGS 0x40000), which triggers a SIGBUS in other processes that have an unaligned access.

CVE Status: Candidate

References: UBUNTU http://www.ubuntu.com/usn/usn-395-1 SUSE http://www.novell.com/linux/security/advisories/2006_79_kernel.html SAID Secunia Advisory: SA23361 Secunia Advisory: SA23384 Secunia Advisory: SA23593 Secunia Advisory: SA25691 Secunia Advisory: SA23474 MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2007:002 CONFIRM http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=47a5c6fa0e204a2b63309c648bb2fde36836c826 BUGTRAQ http://www.securityfocus.com/archive/1/471457 BID 21851

Return to the previous page.