Description
The load_flat_shared_library function in fs/binfmt_flat.c in the flat subsystem in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by executing a shared flat binary, which triggers an access of an "uninitialized cred pointer."
CVSS breakdown
CVSS 3.1
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected products
- Linux / Linux kernel2.6.31
- Linux / Linux kernel2.6.31 – 2.6.31
- Linux / Linux kernel2.6.31 – 2.6.31
- Linux / Linux kernel2.6.31 – 2.6.31
- Linux / Linux kernel2.6.31 – 2.6.31
- Linux / Linux kernel2.6.31 – 2.6.31
References
- VENDOR_ADVISORYhttp://secunia.com/advisories/36278
- MAILING_LISThttp://www.openwall.com/lists/oss-security/2009/08/13/1
- MISChttp://lkml.org/lkml/2009/6/22/91
- MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/52909
- VENDOR_ADVISORYhttp://www.mandriva.com/security/advisories?name=MDVSA-2011:051
- MISChttp://thread.gmane.org/gmane.linux.hardware.blackfin.kernel.devel/1905
- MISChttp://www.securityfocus.com/bid/36037
- MISChttp://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc6
- MISChttp://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.5
- MISChttp://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3440625d78711bee41a84cf29c3d8c579b522666