CVE-2006-5174

security flaw

Published Oct 5, 2006 CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Description
The copy_from_user function in the uaccess code in Linux kernel 2.6 before 2.6.19-rc1, when running on s390, does not properly clear a kernel buffer, which allows local user space programs to read portions of kernel memory by "appending to a file from a bad address," which triggers a fault that prevents the unused memory from being cleared in the kernel buffer.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1233-1 New Linux 2.6.8 packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1237-1 New Linux 2.4.27 packages fix several vulnerabilities
EUVD EUVD EUVD-2006-5159 The copy_from_user function in the uaccess code in Linux kernel 2.6 before 2.6.19-rc1, when running on s390, does not properly clear a kernel buffer, which allows local user space programs to read portions of kernel memory by "appending to a file from a bad address," which triggers a fault that prevents the unused memory from being cleared in the kernel buffer.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 7:41 PM
Reserved
Oct 5, 2006, 12:00 AM
Status
Modified
Published
Oct 10, 2006, 4:06 AM
Modified
Jun 16, 2026, 10:30 PM
Severity
Important
Public date
Sep 28, 2006, 12:00 AM