|
|
CVE Reference: CVE-2008-2137 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2008-2137 |
|
|
Description: The (1) sparc_mmap_check function in arch/sparc/kernel/sys_sparc.c and the (2) sparc64_mmap_check function in arch/sparc64/kernel/sys_sparc.c, in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3, omit some virtual-address range (aka span) checks when the mmap MAP_FIXED bit is not set, which allows local users to cause a denial of service (panic) via unspecified mmap calls. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/42681 UBUNTU http://www.ubuntu.com/usn/usn-625-1 ST 1020119 SAID Secunia Advisory: SA30368 Secunia Advisory: SA31107 Secunia Advisory: SA30499 MLIST http://kerneltrap.org/mailarchive/git-commits-head/2008/5/8/1760604 DEBIAN http://www.debian.org/security/2008/dsa-1588 CONFIRM http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.5 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3 BID 29397 |
|
| Return to the previous page. |
