SB2008070901 - Denial of service in Linux kernel
Published: July 9, 2008 Updated: June 4, 2024
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Use-after-free (CVE-ID: CVE-2008-3077)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a use-after-free error in arch/x86/kernel/ptrace.c. A local user can crash the system.
Remediation
Install update from vendor's website.
References
- http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git;a=commitdiff;h=1e9a615bfce7996ea4d815d45d364b47ac6a74e8
- http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.10
- http://secunia.com/advisories/31048
- http://www.openwall.com/lists/oss-security/2008/07/03/2
- http://www.securityfocus.com/bid/30077
- http://www.vupen.com/english/advisories/2008/2063/references