Linux kernel SG driver denial of service
| kernel-sg-dos (28510) |  Low Risk |
Description:
Linux kernel is vulnerable to a denial of service caused by an unspecified vulnerability in the SG driver (drivers/scsi/sg.c) when handling dio transfers to memory mapped IO spaces. A local attacker could exploit this vulnerability to cause a kernel panic and a denial of service condition for valid users.
Platforms Affected:
- Canonical, Ubuntu 5.04
- Canonical, Ubuntu 5.10
- Canonical, Ubuntu 6.06 LTS
- Debian, Debian Linux 3.1
- Linux, Kernel 2.6.0 test4
- Linux, Kernel 2.6.0 test3
- Linux, Kernel 2.6.0 test2
- Linux, Kernel 2.6.0 test11
- Linux, Kernel 2.6.0 test10
- Linux, Kernel 2.6.0 test1
- Linux, Kernel 2.6.0
- Linux, Kernel 2.6.0 test5
- Linux, Kernel 2.6.0 test6
- Linux, Kernel 2.6.0 test7
- Linux, Kernel 2.6.0 test8
- Linux, Kernel 2.6.0 test9
- Linux, Kernel 2.6.1 rc2
- Linux, Kernel 2.6.1 rc3
- Linux, Kernel 2.6.1
- Linux, Kernel 2.6.1 rc1
- Linux, Kernel 2.6.10 rc1
- Linux, Kernel 2.6.10 rc2
- Linux, Kernel 2.6.10 rc3
- Linux, Kernel 2.6.10
- Linux, Kernel 2.6.11
- Linux, Kernel 2.6.11 rc2
- Linux, Kernel 2.6.11 rc5
- Linux, Kernel 2.6.11 rc1
- Linux, Kernel 2.6.11 rc4
- Linux, Kernel 2.6.11 rc3
- Linux, Kernel 2.6.11.1
- Linux, Kernel 2.6.11.10
- Linux, Kernel 2.6.11.11
- Linux, Kernel 2.6.11.12
- Linux, Kernel 2.6.11.2
- Linux, Kernel 2.6.11.3
- Linux, Kernel 2.6.11.4
- Linux, Kernel 2.6.11.5
- Linux, Kernel 2.6.11.6
- Linux, Kernel 2.6.11.7
- Linux, Kernel 2.6.11.8
- Linux, Kernel 2.6.11.9
- Linux, Kernel 2.6.12 rc3
- Linux, Kernel 2.6.12 rc2
- Linux, Kernel 2.6.12 rc1
- Linux, Kernel 2.6.12 rc6
- Linux, Kernel 2.6.12 rc4
- Linux, Kernel 2.6.12 rc5
- Linux, Kernel 2.6.12
- Linux, Kernel 2.6.12.1
- Linux, Kernel 2.6.12.12
- Linux, Kernel 2.6.12.2
- Linux, Kernel 2.6.12.22
- Linux, Kernel 2.6.12.3
- Linux, Kernel 2.6.12.4
- Linux, Kernel 2.6.12.5
- Linux, Kernel 2.6.12.6
- Linux, Kernel 2.6.13 rc7
- Linux, Kernel 2.6.13 rc6
- Linux, Kernel 2.6.13 rc4
- Linux, Kernel 2.6.13 rc3
- Linux, Kernel 2.6.13 rc2
- Linux, Kernel 2.6.13 rc1
- Linux, Kernel 2.6.13 rc5
- Linux, Kernel 2.6.2 rc1
- Linux, Kernel 2.6.2
- Linux, Kernel 2.6.2 rc2
- Linux, Kernel 2.6.2 rc3
- Linux, Kernel 2.6.3
- Linux, Kernel 2.6.3 rc4
- Linux, Kernel 2.6.3 rc1
- Linux, Kernel 2.6.3 rc3
- Linux, Kernel 2.6.3 rc2
- Linux, Kernel 2.6.4 rc1
- Linux, Kernel 2.6.4 rc2
- Linux, Kernel 2.6.4
- Linux, Kernel 2.6.4 rc3
- Linux, Kernel 2.6.5 rc3
- Linux, Kernel 2.6.5 rc2
- Linux, Kernel 2.6.5 rc1
- Linux, Kernel 2.6.5
- Linux, Kernel 2.6.6
- Linux, Kernel 2.6.6 rc1
- Linux, Kernel 2.6.6 rc2
- Linux, Kernel 2.6.6 rc3
- Linux, Kernel 2.6.7
- Linux, Kernel 2.6.7 rc3
- Linux, Kernel 2.6.7 rc2
- Linux, Kernel 2.6.7 rc1
- Linux, Kernel 2.6.8
- Linux, Kernel 2.6.8 rc1
- Linux, Kernel 2.6.8 rc2
- Linux, Kernel 2.6.8 rc3
- Linux, Kernel 2.6.8 rc4
- Linux, Kernel 2.6.8.1
- Linux, Kernel 2.6.9 rc2
- Linux, Kernel 2.6.9 rc3
- Linux, Kernel 2.6.9 rc1
- Linux, Kernel 2.6.9
- Linux, Kernel 2.6.9 rc4
- MandrakeSoft, Mandrake Linux 2006 X86_64
- MandrakeSoft, Mandrake Linux 2006
- Novell, Linux Desktop 9
- Novell, Open Enterprise Server
- Novell, Open Enterprise Server
- RedHat, Enterprise Linux 4 Desktop
- RedHat, Enterprise Linux 4 WS
- RedHat, Enterprise Linux 4 AS
- RedHat, Enterprise Linux 4 ES
- SuSE, Linux Enterprise Server 8
- SuSE, SuSE Linux 10.0
- SuSE, SuSE Linux 10.1
- SuSE, SuSE Linux 9.1
- SuSE, SuSE Linux 9.2
- SuSE, SuSE Linux 9.3
- SuSE, SuSE SLES 9
Remedy:
Upgrade to the latest version of Linux Kernel (version 2.4.33.1 or later), available from the Linux Kernel Web site. See References.
For Ubuntu Linux:
Refer to Ubuntu Security Advisory USN-302-1 for patch, upgrade or suggested workaround information. See References.
For Red Hat Linux:
Refer to RHSA-2006:0493 for patch, upgrade or suggested workaround information. See References.
For SUSE Linux:
Refer to SUSE Security Announcement SUSE-SA:2006:042 for patch, upgrade or suggested workaround information. See References.
For SUSE Linux:
Refer to SUSE-SA:2006:047 for patch, upgrade, or suggested workaround information. See References.
For Mandriva Linux:
Refer to Mandriva Advisorie MDKSA-2006:123 for patch, upgrade or suggested workaround information. See References.
For Debian GNU/Linux:
Refer to DSA-1183-1 or DSA-1184-1 for patch, upgrade, or suggested workaround information. See References.
For other distributions:
Apply the appropriate update for your system. See References.
Consequences:
Denial of Service
References:
- IBM Systems Support Web site, Support for HMC at https://www14.software.ibm.com/webapp/set2/sas/f/hmc/power5/install/v61.Readme.html#MH01110.
- The Linux Kernel Archives, ChangeLog-2.4.33.1 at http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.1.
- ASA-2006-161: kernel security update (RHSA-2006-0493)
- BID-18101: Linux Kernel SG Driver Direct IO Local Denial of Service Vulnerability
- CVE-2006-1528: Linux kernel before 2.6.13 allows local users to cause a denial of service (crash) via a dio transfer from the sg driver to memory mapped (mmap) IO space.
- DSA-1183: kernel-source-2.4.27 -- several vulnerabilities
- DSA-1184: kernel-source-2.6.8 -- several vulnerabilities
- MDKSA-2006:123: Updated kernel packages fixes multiple vulnerabilities
- RHSA-2006-0493: kernel security update
- SA21555: Linux Kernel SG Driver Denial of Service Vulnerability
- SA21745: Avaya Products Linux Kernel Multiple Vulnerabilities
- SUSE-SA:2006:042: kernel local privilege escalation
- SUSE-SA:2006:047: kernel security problems
- USN-302-1: Linux kernel vulnerabilities
- VUPEN/ADV-2006-3330: Linux Kernel SG Driver IO Transfers Handling and PPC970 Denial of Service Vulnerabilities
Reported:
Aug 19, 2006
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net