Linux PowerPC Kernel Restore_Sigcontext本地拒绝服务漏洞

BUGTRAQ ID: 24845
CVE ID:CVE-2007-3107
CNCVE ID:CNCVE-20073107

Linux PowerPC是一款嵌入式Linux操作系统。

Linux PowerPC存在一个信号处理缺陷，本地攻击者可以利用漏洞对系统进行拒绝服务攻击。

在restore_sigcontext中__copy_from_user调用存在页错误或计时器中断，此操作写入current->thread.fpr和current->thread.vr，由于在拷贝后没有清理MSR_FP和MSR_VEC，在拷贝过程中转换到另一进程可覆盖current->thread.fpr(假定信号处理器用于floating-point指令)，可导致程序崩溃。

RedHat Enterprise Linux Desktop Workstation v. 5 client
RedHat Enterprise Linux Desktop v.5 client
RedHat Enterprise Linux v. 5 server
Linux kernel 2.6.19 1
Linux kernel 2.6.19 .2
Linux kernel 2.6.19 .1
Linux kernel 2.6.19 -rc4

• Trustix Secure Enterprise Linux 2.0
• Trustix Secure Linux 2.2
• Trustix Secure Linux 2.1
• Trustix Secure Linux 2.0
  Linux kernel 2.6.19 -rc3
• Trustix Secure Enterprise Linux 2.0
• Trustix Secure Linux 2.2
• Trustix Secure Linux 2.1
• Trustix Secure Linux 2.0
  Linux kernel 2.6.19 -rc2
• Trustix Secure Enterprise Linux 2.0
• Trustix Secure Linux 2.2
• Trustix Secure Linux 2.1
• Trustix Secure Linux 2.0
  Linux kernel 2.6.19 -rc1
  Linux kernel 2.6.19
  Linux kernel 2.6.18 .4
  Linux kernel 2.6.18 .3
  Linux kernel 2.6.18 .1
  Linux kernel 2.6.18
  Linux kernel 2.6.17 .8
  Linux kernel 2.6.17 .7
  Linux kernel 2.6.17 .6
  Linux kernel 2.6.17 .5
  Linux kernel 2.6.17 .3
  Linux kernel 2.6.17 .2
  Linux kernel 2.6.17 .14
  Linux kernel 2.6.17 .13
  Linux kernel 2.6.17 .12
  Linux kernel 2.6.17 .11
  Linux kernel 2.6.17 .10
  Linux kernel 2.6.17 .1
  Linux kernel 2.6.17 -rc5
  Linux kernel 2.6.17
  Linux kernel 2.6.17
  Linux kernel 2.6.17
  Linux kernel 2.6.17
  Linux kernel 2.6.17
  Linux kernel 2.6.17
  Linux kernel 2.6.16 27
  Linux kernel 2.6.16 13
  Linux kernel 2.6.16 .9
  Linux kernel 2.6.16 .7
  Linux kernel 2.6.16 .23
  Linux kernel 2.6.16 .19
  Linux kernel 2.6.16 .12
  Linux kernel 2.6.16 .11
  Linux kernel 2.6.16 .1
  Linux kernel 2.6.16 -rc1
  Linux kernel 2.6.16
  Linux kernel 2.6.16
  Linux kernel 2.6.16
  Linux kernel 2.6.16
  Linux kernel 2.6.16
  Linux kernel 2.6.16
  Linux kernel 2.6.16
  Linux kernel 2.6.16
  Linux kernel 2.6.16
  Linux kernel 2.6.16
  Linux kernel 2.6.16
• Trustix Secure Enterprise Linux 2.0
• Trustix Secure Linux 2.2
• Trustix Secure Linux 2.1
• Trustix Secure Linux 2.0
  Linux kernel 2.6.15 .4
  Linux kernel 2.6.15 .3
  Linux kernel 2.6.15 .2
  Linux kernel 2.6.15 .1
  Linux kernel 2.6.15 -rc3
  Linux kernel 2.6.15 -rc2
  Linux kernel 2.6.15 -rc1
  Linux kernel 2.6.15
  Linux kernel 2.6.15
• Trustix Secure Enterprise Linux 2.0
• Trustix Secure Linux 2.2
• Trustix Secure Linux 2.1
• Trustix Secure Linux 2.0
  Linux kernel 2.6.15
  Linux kernel 2.6.15
  Linux kernel 2.6.15
  Linux kernel 2.6.15
  Linux kernel 2.6.14 .5
  Linux kernel 2.6.14 .4
  Linux kernel 2.6.14 .3
  Linux kernel 2.6.14 .2
  Linux kernel 2.6.14 .1
  Linux kernel 2.6.14 -rc4
  Linux kernel 2.6.14 -rc3
  Linux kernel 2.6.14 -rc2
  Linux kernel 2.6.14 -rc1
  Linux kernel 2.6.14
  Linux kernel 2.6.14
• Trustix Secure Enterprise Linux 2.0
• Trustix Secure Linux 2.2
• Trustix Secure Linux 2.1
• Trustix Secure Linux 2.0
  Linux kernel 2.6.13 .4
  Linux kernel 2.6.13 .3
  Linux kernel 2.6.13 .2
  Linux kernel 2.6.13 .1
  Linux kernel 2.6.13 -rc7
  Linux kernel 2.6.13 -rc6
  Linux kernel 2.6.13 -rc4
  Linux kernel 2.6.13 -rc1
  Linux kernel 2.6.13
  Linux kernel 2.6.13
• Trustix Secure Enterprise Linux 2.0
• Trustix Secure Linux 2.2
• Trustix Secure Linux 2.1
• Trustix Secure Linux 2.0
  Linux kernel 2.6.12 .6
  Linux kernel 2.6.12 .5
  Linux kernel 2.6.12 .4
  Linux kernel 2.6.12 .3
  Linux kernel 2.6.12 .22
  Linux kernel 2.6.12 .2
  Linux kernel 2.6.12 .12
  Linux kernel 2.6.12 .1
  Linux kernel 2.6.12 -rc5
  Linux kernel 2.6.12 -rc4
  Linux kernel 2.6.12 -rc1
  Linux kernel 2.6.12
  Linux kernel 2.6.12
  Linux kernel 2.6.11 .8
  Linux kernel 2.6.11 .7
  Linux kernel 2.6.11 .6
  Linux kernel 2.6.11 .5
  Linux kernel 2.6.11 .4
  Linux kernel 2.6.11 .12
  Linux kernel 2.6.11 .11
  Linux kernel 2.6.11 -rc4
  Linux kernel 2.6.11 -rc3
  Linux kernel 2.6.11 -rc2
  Linux kernel 2.6.11
• RedHat Fedora Core4
  Linux kernel 2.6.11
• Trustix Secure Enterprise Linux 2.0
• Trustix Secure Linux 2.2
• Trustix Secure Linux 2.1
• Trustix Secure Linux 2.0
  Linux kernel 2.6.10 rc2
  Linux kernel 2.6.10
  Linux kernel 2.6.10
  Linux kernel 2.6.2
  Linux kernel 2.6.18-8.1.8.el5
  Linux kernel 2.6.18
  Linux kernel 2.6.15.5
  Linux kernel 2.6.15.11
  Linux kernel 2.6.11.4

升级到kernel-2.6.18-8.1.8.el5：

<a href=“http://www.kernel.org/” target=“_blank”>http://www.kernel.org/</a>