Description
The fill_write_buffer function in sysfs/file.c in Linux kernel 2.6.12 up to versions before 2.6.17-rc1 does not zero terminate a buffer when a length of PAGE_SIZE or more is requested, which might allow local users to cause a denial of service (crash) by causing an out-of-bounds read.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2006-1059 | The fill_write_buffer function in sysfs/file.c in Linux kernel 2.6.12 up to versions before 2.6.17-rc1 does not zero terminate a buffer when a length of PAGE_SIZE or more is requested, which might allow local users to cause a denial of service (crash) by causing an out-of-bounds read. |
Ubuntu USN |
USN-281-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-302-1 | Linux kernel vulnerabilities |
References
History
No history.
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-07T16:56:15.547Z
Reserved: 2006-03-07T00:00:00.000Z
Link: CVE-2006-1055
No data.
Status : Modified
Published: 2006-04-05T17:04:00.000
Modified: 2026-04-16T00:27:16.627
Link: CVE-2006-1055
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD
Ubuntu USN