Back to search
CVE-2008-3535
Published: Aug 8, 2008
Modified: Aug 7, 2024
PUBLISHED
Description
Off-by-one error in the iov_iter_advance function in mm/filemap.c in the Linux kernel before 2.6.27-rc2 allows local users to cause a denial of service (system crash) via a certain sequence of file I/O operations with readv and writev, as demonstrated by testcases/kernel/fs/ftest/ftest03 from the Linux Test Project.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
32190
third-party-advisory
x_refsource_SECUNIA
32393
third-party-advisory
x_refsource_SECUNIA
DSA-1636
vendor-advisory
x_refsource_DEBIAN
31132
vdb-entry
x_refsource_BID
linux-kernel-ioviteradvance-dos(44492)
vdb-entry
x_refsource_XF
31881
third-party-advisory
x_refsource_SECUNIA
USN-659-1
vendor-advisory
x_refsource_UBUNTU
RHSA-2008:0857
vendor-advisory
x_refsource_REDHAT
[linux-kernel] 20080730 2.6.27-rc1: IP: iov_iter_advance+0x2e/0x90
mailing-list
x_refsource_MLIST
http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.27-rc2
x_refsource_CONFIRM
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now