SB2007071101 - Input validation error in Linux kernel



SB2007071101 - Input validation error in Linux kernel

Published: July 11, 2007

Security Bulletin ID SB2007071101
Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Input validation error (CVE-ID: CVE-2007-3107)

The vulnerability allows a local user to perform service disruption.

The signal handling in the Linux kernel before 2.6.22, including 2.6.2, when running on PowerPC systems using HTX, allows local users to cause a denial of service via unspecified vectors involving floating point corruption and concurrency, related to clearing of MSR bits. This vulnerability affects Linux kernel 2.6.2 and later, when run on PowerPC systems using HTX.


Remediation

Install update from vendor's website.