CVE-2007-4133

2007-10-0400:00:00

ubuntu.com

CVSS2

4.7

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

EPSS

Percentile

10.1%

JSON

The (1) hugetlb_vmtruncate_list and (2) hugetlb_vmtruncate functions in
fs/hugetlbfs/inode.c in the Linux kernel before 2.6.19-rc4 perform certain
prio_tree calculations using HPAGE_SIZE instead of PAGE_SIZE units, which
allows local users to cause a denial of service (panic) via unspecified
vectors.

Notes

Author	Note
jdstrand	fixed in DSA 1381-1

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchlinux-source-2.6.15< 2.6.15-51.66UNKNOWN
ubuntu6.10noarchlinux-source-2.6.17< 2.6.17.1-12.42UNKNOWN