CVE-2006-5173

Description

Linux kernel does not properly save or restore EFLAGS during a context switch, or reset the flags when creating new threads, which allows local users to cause a denial of service (process crash), as demonstrated using a process that sets the Alignment Check flag (EFLAGS 0x40000), which triggers a SIGBUS in other processes that have an unaligned access.

References

http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=47a5c6fa0e204a2b63309c648bb2fde36836c826

http://secunia.com/advisories/23361

http://secunia.com/advisories/23384

http://secunia.com/advisories/23474

http://secunia.com/advisories/23593

http://secunia.com/advisories/25691

http://www.mandriva.com/security/advisories?name=MDKSA-2007:002

http://www.novell.com/linux/security/advisories/2006_79_kernel.html

http://www.ubuntu.com/usn/usn-395-1

Details

Risk Information

CVSS v2