Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

kernel: extended attribute denial of service

Package(s):

kernel

CVE #(s):

CAN-2005-0757

Created:

May 18, 2005

Updated:

May 18, 2005

Description:

The extended attribute code (at least as backported by Red Hat into the 2.4 kernel) suffers from an offset handling error which can be exploited to cause a system crash.

Alerts:

Red Hat

RHSA-2005:294-01

2005-05-18

(Log in to post comments)

kernel: extended attribute denial of service

Posted May 26, 2005 7:54 UTC (Thu) by mjc@redhat.com (guest, #2303) [Link]

Note that this issue only affects Red Hat Enterprise Linux 3 (and anyone who has used the Red Hat sources to build their kernels). This issue doesn't affect 2.4 or 2.6 upstream kernels.