CVE-2006-5173

LOW

Description

Linux kernel does not properly save or restore EFLAGS during a context switch, or reset the flags when creating new threads, which allows local users to cause a denial of service (process crash), as demonstrated using a process that sets the Alignment Check flag (EFLAGS 0x40000), which triggers a SIGBUS in other processes that have an unaligned access.

References

http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=47a5c6fa0e204a2b63309c648bb2fde36836c826

http://secunia.com/advisories/23361

http://secunia.com/advisories/23384

http://secunia.com/advisories/23474

http://secunia.com/advisories/23593

http://secunia.com/advisories/25691

http://www.mandriva.com/security/advisories?name=MDKSA-2007:002

http://www.novell.com/linux/security/advisories/2006_79_kernel.html

http://www.securityfocus.com/archive/1/471457

http://www.securityfocus.com/bid/21851

http://www.ubuntu.com/usn/usn-395-1

Details

Source: MITRE

Published: 2006-10-17

Updated: 2018-10-30

Risk Information

CVSS v2.0

Base Score: 2.1

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P

Impact Score: 2.9

Exploitability Score: 3.9

Severity: LOW