First published: Mon May 02 2005(Updated: )
The (1) it87 and (2) via686a drivers in I2C for Linux 2.6.x before 2.6.11.8, and 2.6.12 before 2.6.12-rc2, create the sysfs "alarms" file with write permissions, which allows local users to cause a denial of service (CPU consumption) by attempting to write to the file, which does not have an associated store function.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Linux Kernel | =2.6.0 | |
Linux Kernel | =2.6.1 | |
Linux Kernel | =2.6.1-rc1 | |
Linux Kernel | =2.6.1-rc2 | |
Linux Kernel | =2.6.2 | |
Linux Kernel | =2.6.3 | |
Linux Kernel | =2.6.4 | |
Linux Kernel | =2.6.5 | |
Linux Kernel | =2.6.6 | |
Linux Kernel | =2.6.7 | |
Linux Kernel | =2.6.8 | |
Linux Kernel | =2.6.8.1 | |
Linux Kernel | =2.6.9-2.6.20 | |
Linux Kernel | =2.6.10 | |
Linux Kernel | =2.6.10-rc2 | |
Linux Kernel | =2.6.11 | |
Linux Kernel | =2.6.12-rc1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-1369 has a medium severity level due to its ability to cause local denial of service.
To fix CVE-2005-1369, update to a version of the Linux kernel that is 2.6.11.8 or later.
CVE-2005-1369 affects Linux kernel versions prior to 2.6.11.8 and 2.6.12-rc2.
Systems running Linux kernel versions from 2.6.0 to 2.6.11.7 are vulnerable to CVE-2005-1369.
CVE-2005-1369 specifically impacts the sysfs 'alarms' file created by the it87 and via686a drivers in I2C.