Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 130701 - Linux kernel Perfmon.c Local Denial of service vulnerability (CVE-2006-0558)
Summary: Linux kernel Perfmon.c Local Denial of service vulnerability (CVE-2006-0558)
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Kernel (show other bugs)
Hardware: IA64 Linux
: High normal (vote)
Assignee: Gentoo Security
URL: http://www.securityfocus.com/bid/1748...
Whiteboard: [linux <2.6.16] [gp <2.6.16-2]
Keywords:
: 130702 130703 130705 (view as bug list)
Depends on:
Blocks:
 
Reported: 2006-04-21 02:51 UTC by Dax
Modified: 2009-08-21 19:16 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Dax 2006-04-21 02:51:20 UTC 
Perfmon (perfmon.c) in Linux kernel on IA64 architectures allows local users to cause a denial of service (crash) by interrupting a task while another process is accessing the mm_struct, which triggers a BUG_ON action in the put_page_testzero function.
Comment 1 Tavis Ormandy (RETIRED) gentoo-dev 2006-04-21 02:59:17 UTC 
*** Bug 130702 has been marked as a duplicate of this bug. ***
Comment 2 Tavis Ormandy (RETIRED) gentoo-dev 2006-04-21 02:59:54 UTC 
*** Bug 130703 has been marked as a duplicate of this bug. ***
Comment 3 Tavis Ormandy (RETIRED) gentoo-dev 2006-04-21 03:02:06 UTC 
*** Bug 130705 has been marked as a duplicate of this bug. ***
Comment 4 Tim Yamin (RETIRED) gentoo-dev 2006-04-22 13:08:42 UTC 
According to http://marc.theaimsgroup.com/?l=linux-ia64&m=114530938403347&w=2 2.6.16 isn't vulnerable; only gentoo-sources affected.
Comment 5 Tim Yamin (RETIRED) gentoo-dev 2006-04-28 13:27:29 UTC 
gentoo-sources-2.6.16-r3 now stable on IA64, resolving bug. No other archs/sources affected.