CVE-2005-0916: Low severity Linux Linux kernel vulnerability

Published Mar 29, 2005

Updated

AIO in the Linux kernel 2.6.11 on the PPC64 or IA64 architectures with CONFIGHUGETLBPAGE enabled allows local users to cause a denial of service (system panic) via a process that executes the ioqueueinit function but exits without running ioqueuerelease, which causes exitaio and ishugepageonlyrange to fail.

Affected Software

1 affected component

Linux Linux kernel=2.6.11

Event History

Mar 29, 2005

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-0916?

CVE-2005-0916 is rated as a high severity vulnerability that can lead to denial of service situations.

How do I fix CVE-2005-0916?

To mitigate CVE-2005-0916, consider upgrading to a newer version of the Linux kernel that does not have this vulnerability.

Which systems are affected by CVE-2005-0916?

CVE-2005-0916 affects Linux kernel 2.6.11 operating on PPC64 or IA64 architectures with CONFIG_HUGETLB_PAGE enabled.

What is the impact of CVE-2005-0916?

The impact of CVE-2005-0916 is a potential system panic due to improper resource cleanup in the AIO implementation.

Who can exploit CVE-2005-0916?

CVE-2005-0916 can be exploited by local users who have the ability to execute the vulnerable io_queue_init function.