CVE-2008-3534 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-3534
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-3534

Description: The shmem_delete_inode function in mm/shmem.c in the tmpfs implementation in the Linux kernel before 2.6.26.1 allows local users to cause a denial of service (system crash) via a certain sequence of file create, remove, and overwrite operations, as demonstrated by the insserv program, related to allocation of "useless pages" and improper maintenance of the i_blocks count.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/44489 UBUNTU http://www.ubuntu.com/usn/usn-659-1 SAID Secunia Advisory: SA31881 Secunia Advisory: SA32190 Secunia Advisory: SA32393 REDHAT http://www.redhat.com/support/errata/RHSA-2008-0857.html MLIST http://lkml.org/lkml/2008/7/26/71 DEBIAN http://www.debian.org/security/2008/dsa-1636 CONFIRM http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.1 http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git;a=commit;h=14fcc23fdc78e9d32372553ccf21758a9bd56fa1 BID 31134

Return to the previous page.