Linux kernel does not properly save or restore EFLAGS during a context switch, or reset the flags when creating new threads, which allows local users to cause a denial of service (process crash), as demonstrated using a process that sets the Alignment Check flag (EFLAGS 0x40000), which triggers a SIGBUS in other processes that have an unaligned access.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-2.6.12-10-386Upgrade linux-image-2.6.17-10-powerpc-smpUpgrade linux-image-2.6.15-27-amd64-serverUpgrade linux-image-2.6.17-10-server-bigironUpgrade linux-image-2.6.12-10-686-smpUpgrade linux-source-2.6.15Upgrade linux-image-2.6.15-27-386Upgrade linux-image-2.6.15-27-amd64-xeonUpgrade linux-image-2.6.17-10-sparc64-smpUpgrade linux-image-2.6.12-10-k7-smpUpgrade linux-patch-ubuntu-2.6.12Upgrade linux-image-2.6.15-27-k7Upgrade linux-image-2.6.15-27-sparc64-smpUpgrade linux-image-2.6.12-10-powerpc64-smpUpgrade linux-image-2.6.12-10-686Upgrade linux-image-2.6.15-27-powerpc-smpUpgrade linux-image-2.6.15-27-amd64-k8Upgrade linux-image-2.6.15-27-sparc64Upgrade linux-image-2.6.12-10-amd64-xeonUpgrade linux-image-2.6.17-10-genericUpgrade linux-image-2.6.17-10-sparc64Upgrade linux-image-2.6.12-10-amd64-k8-smpUpgrade linux-image-2.6.12-10-sparc64-smpUpgrade linux-image-2.6.12-10-powerpcUpgrade linux-image-2.6.15-27-amd64-genericUpgrade linux-image-2.6.12-10-k7Upgrade linux-image-2.6.15-27-server-bigironUpgrade linux-image-2.6.17-10-powerpcUpgrade linux-image-2.6.17-10-serverUpgrade linux-image-2.6.12-10-powerpc-smpUpgrade linux-image-2.6.15-27-powerpc64-smpUpgrade linux-image-2.6.12-10-amd64-genericUpgrade linux-image-2.6.17-10-powerpc64-smpUpgrade linux-image-2.6.15-27-powerpcUpgrade linux-image-2.6.15-27-serverUpgrade linux-image-2.6.17-10-386Upgrade linux-image-2.6.15-27-686Upgrade linux-image-2.6.12-10-amd64-k8Upgrade linux-image-2.6.12-10-sparc64 | Nov 8, 2024 | Oct 17, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub