Upstream information
Description
Linux kernel before 2.6.16.21 and 2.6.17, when running on PowerPC, does not perform certain required access_ok checks, which allows local users to read arbitrary kernel memory on 64-bit systems (signal_64.c) and cause a denial of service (crash) and possibly read kernel memory on 32-bit systems (signal_32.c).SUSE information
Overall state of this security issue: Resolved
This issue is currently rated as having important severity.
| National Vulnerability Database | |
|---|---|
| Base Score | 5.6 |
| Vector | AV:L/AC:H/Au:N/C:C/I:N/A:C |
| Access Vector | Local |
| Access Complexity | High |
| Authentication | None |
| Confidentiality Impact | Complete |
| Integrity Impact | None |
| Availability Impact | Complete |
SUSE Security Advisories:
- SUSE-SA:2006:042, published Wed, 26 Jul 2006 14:00:00 +0000
- SUSE-SA:2006:047, published Fri, 11 Aug 2006 17:00:00 +0000
SUSE Timeline for this CVE
CVE page created: Fri Jun 28 02:49:28 2013CVE page last modified: Fri Dec 8 16:16:18 2023