Secunia Logo
Netsikker nu! 2008
 
CVE Reference: CVE-2008-2137
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2008-2137

Description:
The (1) sparc_mmap_check function in arch/sparc/kernel/sys_sparc.c and the (2) sparc64_mmap_check function in arch/sparc64/kernel/sys_sparc.c, in the Linux kernel before 2.6.25.3, omit some virtual-address range (aka span) checks when the mmap MAP_FIXED bit is not set, which allows local users to cause a denial of service (panic) via unspecified mmap calls.

CVE Status:
Candidate

References:

UBUNTU
  http://www.ubuntu.com/usn/usn-625-1

SAID
  Secunia Advisory: SA30368
  Secunia Advisory: SA31107

MLIST
  http://kerneltrap.org/mailarchive/git-commits-head/2008/5/8/1760604

DEBIAN
  http://www.debian.org/security/2008/dsa-1588

CONFIRM
  http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3

BID
  29397


Return to the previous page.