CVE-2008-3535 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-3535
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-3535

Description: Off-by-one error in the iov_iter_advance function in mm/filemap.c in the Linux kernel before 2.6.27-rc2 allows local users to cause a denial of service (system crash) via a certain sequence of file I/O operations with readv and writev, as demonstrated by testcases/kernel/fs/ftest/ftest03 from the Linux Test Project.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/44492 UBUNTU http://www.ubuntu.com/usn/usn-659-1 SAID Secunia Advisory: SA32393 Secunia Advisory: SA31881 Secunia Advisory: SA32190 REDHAT http://www.redhat.com/support/errata/RHSA-2008-0857.html MLIST http://www.lkml.org/lkml/2008/7/30/446 DEBIAN http://www.debian.org/security/2008/dsa-1636 CONFIRM http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.27-rc2 http://mirror.celinuxforum.org/gitstat/commit-detail.php?commit=94ad374a0751f40d25e22e036c37f7263569d24c BID 31132

Return to the previous page.