CVE-2006-2448

Linux Kernel < 2.6.16.21 and 2.6.17 - Denial of Service and Kernel Memory Read via Missing access_ok Checks

Title source: llm

Description

Linux kernel before 2.6.16.21 and 2.6.17, when running on PowerPC, does not perform certain required access_ok checks, which allows local users to read arbitrary kernel memory on 64-bit systems (signal_64.c) and cause a denial of service (crash) and possibly read kernel memory on 32-bit systems (signal_32.c).

References (20)

Core 20

Core References

Vendor Advisory x_refsource_confirm

http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7c85d1f9d358b24c5b05c3a2783a78423775a080

Vendor Advisory x_refsource_confirm

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.21

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/20703

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2006/2451

Vendor Advisory vendor-advisory x_refsource_suse

http://www.novell.com/linux/security/advisories/2006_42_kernel.html

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/438168/100/0/threaded

Vendor Advisory vendor-advisory x_refsource_suse

http://www.novell.com/linux/security/advisories/2006_47_kernel.html

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10040

Vendor Advisory vendor-advisory x_refsource_trustix

http://www.trustix.org/errata/2006/0037

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2006-0575.html

Issue Tracking x_refsource_confirm

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=194215

Vendor Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/usn-311-1

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/21465

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/20831

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/21498

Patch vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/18616

Vendor Advisory x_refsource_confirm

http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/22417

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/20991

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/21179

Scores

EPSS 0.0037

EPSS Percentile 29.5%

Details

Status published

Products (11)

linux/linux_kernel 2.6.0 (12 CPE variants)

linux/linux_kernel 2.6.1 (3 CPE variants)

linux/linux_kernel 2.6.2 (4 CPE variants)

linux/linux_kernel 2.6.3 (4 CPE variants)

linux/linux_kernel 2.6.4 (4 CPE variants)

linux/linux_kernel 2.6.5 (4 CPE variants)

linux/linux_kernel 2.6.6 (4 CPE variants)

linux/linux_kernel 2.6.7 (4 CPE variants)

linux/linux_kernel 2.6.8 (5 CPE variants)

linux/linux_kernel 2.6.9 2.6.20 (5 CPE variants)

... and 1 more

Published Jun 23, 2006

Tracked Since Feb 18, 2026