Linux Kernel __scm_destroy() Recursive State Bug Lets Local Users Deny Service
|
|
SecurityTracker Alert ID: 1021292
|
|
SecurityTracker URL: http://securitytracker.com/id?1021292
|
|
CVE Reference: CVE-2008-5029
(Links to External Site)
|
Date: Nov 28 2008
|
Impact: Denial of service via local system
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Version(s): prior to 2.4.36.9; 2.6 prior to 2.6.25.20
|
Description: A vulnerability was reported in the Linux kernel. A local user can trigger a kernel panic.
A local user can cause the __scm_destroy() function to close a socket and enter back into the function, resulting in an eventual
kernel panic.
The vulnerability resides in 'net/core/scm.c'.
The original advisory is available at:
http://marc.info/?l=linux-netdev&m=122593044330973&w=2
dar
kircop.org reported this vulnerability.
|
Impact: A local user can cause a kernel panic on the target system.
|
Solution: The vendor has issued a fixed version (2.4.36.9, 2.6.25.20).
|
Vendor URL: www.kernel.org/ (Links to External Site)
|
Cause: State error
|
Underlying OS: Linux (Caldera/SCO), Linux (Conectiva), Linux (Debian), Linux (EnGarde), Linux (Gentoo), Linux (HP Secure OS), Linux (Immunix), Linux (Mandriva/Mandrake), Linux (Progeny Debian), Linux (Red Hat Enterprise), Linux (Red Hat Fedora), Linux (Red Hat Linux), Linux (SGI), Linux (Slackware), Linux (Sun), Linux (SuSE), Linux (Trustix), Linux (Turbo Linux), Linux (Ubuntu), Linux (Xandros)
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
Date: Fri, 28 Nov 2008 16:35:02 -0500
Subject: Linux kernel
|
CVE-2008-5029 kernel: Unix sockets kernel panic
http://marc.info/?l=linux-netdev&m=122593044330973&w=2
|
|
