Description
The search_binary_handler function in exec.c in Linux 2.4 kernel on 64-bit x86 architectures does not check a return code for a particular function call when virtual memory is low, which allows local users to cause a denial of service (panic), as demonstrated by running a process using the bash ulimit -v command.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 3 | kernel +8 | 2.4.21-37.0.1.EL | RHSA-2006:0140 |
Advisories 1
- RHSA-2006:0140 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- RHSA-2006:0140 vendor-advisory
- 18684 third-party-advisory
- 16320 vdb-entry
- oval:org.mitre.oval:def:10649 vdb-entry signature
- FLSA:157459-2 vendor-advisory
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=161925
- 18523 third-party-advisory
- RHSA-2006:0190 vendor-advisory
- FLSA:157459-1 vendor-advisory
- 18562 third-party-advisory