CVE-2007-0006 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2007-0006
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-0006

Description: The key serial number collision avoidance code in the key_alloc_serial function in Linux kernel 2.6.9 up to 2.6.20 allows local users to cause a denial of service (crash) via vectors that trigger a null dereference, as originally reported as "spinlock CPU recursion."

CVE Status: Candidate

References: UBUNTU http://www.ubuntu.com/usn/usn-451-1 SUSE http://www.novell.com/linux/security/advisories/2007_21_kernel.html SAID Secunia Advisory: SA24300 Secunia Advisory: SA24259 Secunia Advisory: SA24109 Secunia Advisory: SA24429 Secunia Advisory: SA24482 Secunia Advisory: SA24547 Secunia Advisory: SA24752 Secunia Advisory: SA25691 REDHAT http://www.redhat.com/support/errata/RHSA-2007-0099.html http://www.redhat.com/support/errata/RHSA-2007-0085.html MANDRIVA http://frontal2.mandriva.com/security/advisories?name=MDKSA-2007:060 http://frontal2.mandriva.com/security/advisories?name=MDKSA-2007:047 CONFIRM http://bugzilla.kernel.org/show_bug.cgi?id=7727 BUGTRAQ http://www.securityfocus.com/archive/1/471457 BID 22539

Return to the previous page.