Language Selection

English French German Italian Portuguese Spanish

Linux Kernel Denial of Service Vulnerability

Filed under

Daniel McNeil has reported a vulnerability in the Linux Kernel, which can be exploited by malicious, local users to cause a DoS (Denial of Service).

The vulnerability is caused due to an error in the AIO (Asynchronous I/O) support within the "is_hugepage_only_range()" function. This can be exploited via a specially crafted program calling the "io_queue_init()" function and then exiting without calling the "io_queue_release()" function.

Successful exploitation crashes the system on PPC64 and IA64 architectures, but requires that CONFIG_HUGETLB_PAGE is enabled.

The vulnerability has been reported in versions 2.6.8 and 2.6.11. Other versions may also be affected.

Grant only trusted users access to affected systems.


More in Tux Machines

Linux-Powered C.H.I.P. Tiny SBC Will be the World's First $8 Computer

Remember the world's tiniest computer that goes by the name of C.H.I.P.? Of course you do, it is the world's cheapest single-board computer (SBC) ever made, available for purchase for only $9 (€8.4). Read more

Leftovers: Gaming

GNOME's Evolution Email Client Now Follows the Notification Settings of GNOME Shell

The GNOME developers are still working hard these days on the second milestone of the upcoming GNOME 3.20 desktop environment, which means that we should see more and more updates to various core components and GNOME applications. Read more Also: GNOME Shell and Mutter Updated for GNOME 3.20, Several Bugs Were Fixed

My Open Source Thanksgiving List: Wine, Netflix, OpenWrt and More

Running 3.1 miles through my hometown. Consuming unreasonable quantities of simple carbohydrates, fat and sodium. Pretending that the former activity justifies the latter. These are some of my favorite Thanksgiving traditions. Read more