Description
Multiple drivers in Linux kernel 2.4.19 and earlier do not properly mark memory with the VM_IO flag, which causes incorrect reference counts and may lead to a denial of service (kernel panic) when accessing freed kernel pages.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 3 | kernel +8 | 2.4.21-37.0.1.EL | RHSA-2006:0140 |
Advisories 1
- RHSA-2006:0140 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- RHSA-2006:0140 vendor-advisory
- oval:org.mitre.oval:def:11474 vdb-entry signature
- 12338 vdb-entry
- RHSA-2005:017 vendor-advisory
- linux-kernel-vmio-dos(19275) vdb-entry
- RHSA-2005:016 vendor-advisory
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=137821
- http://www.kernel.org/pub/linux/kernel/people/andrea/kernels/v2.4/2.4.23aa3/00_VM_IO-4
- 18562 third-party-advisory