CVE-2007-5494: Medium severity redhat Enterprise Linux vulnerability
Due issue described in https://bugzilla.redhat.com/showbug.cgi?id=313681
open(OATOMICLOOKUP) leaks the dentry on the filesystems where drevalidate is implemented. i.e open ("/proc/self/exe", ORDONLY); open ("/proc/self/exe", ORDONLY | 02000000);
leaks one dentry.
By this way it's possible to eat all the memory on the node or overflow dentry->dcount.
Both RHEL4 and RHEL5 kernels are vulnerabled
Acknowledgements:
Red Hat would like to credit Vasily Averin for reporting this issue.
Other sources
Memory leak in the Red Hat Content Accelerator kernel patch in Red Hat Enterprise Linux (RHEL) 4 and 5 allows local users to cause a denial of service (memory consumption) via a large number of open requests involving OATOMICLOOKUP.
— Red Hat
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2007-5494?
CVE-2007-5494 is considered a moderate severity vulnerability due to its potential for local denial of service attacks.
How do I fix CVE-2007-5494?
To fix CVE-2007-5494, upgrade to the kernel version 0:2.6.18-53.1.4.el5 or later for Red Hat Enterprise Linux 5, or the appropriate patched version for Red Hat Enterprise Linux 4.
Who is affected by CVE-2007-5494?
CVE-2007-5494 affects local users of Red Hat Enterprise Linux versions 4.0 and 5.0.
What type of vulnerability is CVE-2007-5494?
CVE-2007-5494 is a memory leak vulnerability that can be exploited to cause local denial of service.
What applications are primarily impacted by CVE-2007-5494?
CVE-2007-5494 impacts the Red Hat Content Accelerator in the kernel of Red Hat Enterprise Linux.