Technical Description

Multiple vulnerabilities were identified in Linux Kernel, which may be exploited by local users to obtain elevated privileges or conduct denial of service attacks.

- The first flaw is due to an input validation error in "ptrace()" when handling an invalid segment base on the amd64 platform, which may be exploited by malicious users to cause a denial of service.

- The second vulnerability resides in the "mmap()" function that could create illegal memory maps with the start address pointing beyond the end address, which may be exploited by a local user to crash the kernel and potentially execute arbitrary code with elevated privileges.

- The third issue resides in the "rose_rt_ioctl()" function (net/rose/rose_route.c) of the Radionet Open Source Environment (ROSE) implementation when verifying the ndigis argument of a new route. This flaw affects Linux Kernel versions prior to 2.6.11.11.

- The fourth vulnerability resides in the auditing code on ia64 when "CONFIG_AUDIT" is disabled, which may be exploited by local attackers to cause a denial of service.

Affected Products

Linux Kernel 2.6.x

Solution

Upgrade to Linux Kernel version 2.6.11.11.

References

http://www.vupen.com/english/advisories/2005/0706
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.11
http://www.ubuntulinux.org/support/documentation/usn/usn-137-1
http://rhn.redhat.com/errata/RHSA-2005-420.html
http://www.gelato.unsw.edu.au/linux-ia64/0409/11073.html

Credits

Vulnerabilities reported by Alexander Nyberg, Chris Wright and Stephane Eranian.

ChangeLog

2005-06-08 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.