Red Hat Linux 4GB Split Patch Unspecified Kernel Memory Read/Write

2005-02-19T23:53:36
ID OSVDB:15416
Type osvdb
Reporter Red Hat, Inc.(), Kirill Korotaev()
Modified 2005-02-19T23:53:36

Description

Vulnerability Description

A missing access check regression in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch has been discovered. On systems using the hugemem kernel, a local unprivileged user could use this flaw to cause a denial of service (crash). (CAN-2005-0090)

A flaw in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch can allow syscalls to read and write arbitrary kernel memory. On systems using the hugemem kernel, a local unprivileged user could use this flaw to gain privileges. (CAN-2005-0091)

An additional flaw in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch was discovered. On x86 systems using the hugemem kernel, a local unprivileged user may be able to use this flaw to cause a denial of service (crash). (CAN-2005-0092)

Solution Description

All Red Hat Enterprise Linux 4 users are advised to upgrade their kernels to the packages associated with their machine architectures and configurations as listed in this erratum.

Short Description

A missing access check regression in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch has been discovered. On systems using the hugemem kernel, a local unprivileged user could use this flaw to cause a denial of service (crash). (CAN-2005-0090)

A flaw in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch can allow syscalls to read and write arbitrary kernel memory. On systems using the hugemem kernel, a local unprivileged user could use this flaw to gain privileges. (CAN-2005-0091)

An additional flaw in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch was discovered. On x86 systems using the hugemem kernel, a local unprivileged user may be able to use this flaw to cause a denial of service (crash). (CAN-2005-0092)

References:

Vendor Specific Advisory URL CVE-2005-0092 CVE-2005-0090 CVE-2005-0091 Bugtraq ID: 12599