CVE-2006-5173

low

Description

Linux kernel does not properly save or restore EFLAGS during a context switch, or reset the flags when creating new threads, which allows local users to cause a denial of service (process crash), as demonstrated using a process that sets the Alignment Check flag (EFLAGS 0x40000), which triggers a SIGBUS in other processes that have an unaligned access.

References

http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=47a5c6fa0e204a2b63309c648bb2fde36836c826

http://secunia.com/advisories/23361

http://secunia.com/advisories/23384

http://secunia.com/advisories/23474

http://secunia.com/advisories/23593

http://secunia.com/advisories/25691

http://www.mandriva.com/security/advisories?name=MDKSA-2007:002

http://www.novell.com/linux/security/advisories/2006_79_kernel.html

http://www.ubuntu.com/usn/usn-395-1

Details

Published: 2006-10-17

Risk Information

CVSS v2

Base Score: 2.1

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:P

Severity: Low