CVE-2005-1369: Low severity Linux Linux kernel vulnerability

Published May 2, 2005

Updated

The (1) it87 and (2) via686a drivers in I2C for Linux 2.6.x before 2.6.11.8, and 2.6.12 before 2.6.12-rc2, create the sysfs "alarms" file with write permissions, which allows local users to cause a denial of service (CPU consumption) by attempting to write to the file, which does not have an associated store function.

Affected Software

17 affected components

Linux Linux kernel=2.6.11

Linux Linux kernel=2.6.12-rc1

Linux Linux kernel=2.6.5

Linux Linux kernel=2.6.1

Linux Linux kernel=2.6.10

Linux Linux kernel=2.6.3

Linux Linux kernel=2.6.4

Linux Linux kernel=2.6.2

Linux Linux kernel=2.6.1-rc2

Linux Linux kernel=2.6.8

Linux Linux kernel=2.6.10-rc2

Linux Linux kernel=2.6.0

Linux Linux kernel=2.6.7

Linux Linux kernel=2.6.1-rc1

Linux Linux kernel=2.6.9-2.6.20

Linux Linux kernel=2.6.8.1

Linux Linux kernel=2.6.6

Remediation

Patch Available

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.8

Event History

May 2, 2005

CVE Published

04:00 AM

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-1369?

CVE-2005-1369 has a medium severity level due to its ability to cause local denial of service.

How do I fix CVE-2005-1369?

To fix CVE-2005-1369, update to a version of the Linux kernel that is 2.6.11.8 or later.

Which Linux kernel versions are affected by CVE-2005-1369?

CVE-2005-1369 affects Linux kernel versions prior to 2.6.11.8 and 2.6.12-rc2.

What types of systems are vulnerable to CVE-2005-1369?

Systems running Linux kernel versions from 2.6.0 to 2.6.11.7 are vulnerable to CVE-2005-1369.

What component of the Linux kernel is impacted by CVE-2005-1369?

CVE-2005-1369 specifically impacts the sysfs 'alarms' file created by the it87 and via686a drivers in I2C.