Internet threat level: 1
Home→Descriptions→SA37590
Linux Kernel Multiple Vulnerabilities
| Secunia ID | |
| CVE-ID | |
| Release Date |
04 Dec 2009 |
| Last Change |
16 Jun 2010 |
| Criticality | |
| Solution Status |
Partial Fix |
| Where | |
| Impact |
DoS (Denial of Service)This includes vulnerabilities ranging from excessive resource consumption (e.g. causing a system to use a lot of memory) to crashing an application or an entire system. Manipulation of dataThis includes vulnerabilities where a user or a remote attacker can manipulate local data on a system, but not necessarily be able to gain escalated privileges or system access. The most frequent type of vulnerabilities with this impact are SQL-injection vulnerabilities, where a malicious user or person can manipulate SQL queries. Privilege escalationThis covers vulnerabilities where a user is able to conduct certain tasks with the privileges of other users or administrative users. This typically includes cases where a local user on a client or server system can gain access to the administrator or root account thus taking full control of the system. |
| Description |
A security issue and some vulnerabilities have been reported in the Linux Kernel, which can be exploited by malicious, local users to manipulate certain data and cause a DoS (Denial of Service), and by malicious people to potentially compromise a vulnerable system. 1) The security issue is caused due to insecure permissions being set to driver attributes in sysfs ("/sys/bus/pci/drivers/megaraid_sas/poll_mode_io") and can be exploited to manipulate driver behaviour. 2) A locking error within the TTY subsystem can be exploited to cause a NULL pointer dereference. 3) A boundary error within the "hfs_bnode_read()" function in fs/hfs/bnode.c can be exploited to cause a buffer overflow by e.g. tricking a user into mounting and accessing a specially crafted HFS file system. 4) A vulnerability is caused due to an unspecified error when handling the EXT4_IOC_MOVE_EXT IOCTL. This can be exploited to e.g. cause a file system corruption by sending a specially crafted IOCTL. |
| Solution |
Update to version 2.6.33, which fixes vulnerabilities #1, #2, and #3. Restrict access to trusted users only. Do not mount untrusted file systems. |
| Reported by |
1) Bryn M. Reeves, reported in a Red Hat bugreport. |
| Original Advisory |
1) https://bugzilla.redhat.com/show_bug.cgi?id=526068 |
© 1997-2012 Kaspersky Lab ZAO. All Rights Reserved.
Industry-leading Antivirus Software.
Registered trademarks and service marks are the property of their respective owners.