Description
Certain modifications to the Linux kernel 2.6.16 and earlier do not add the appropriate Linux Security Modules (LSM) file_permission hooks to the (1) readv and (2) writev functions, which might allow attackers to bypass intended access restrictions.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.1 | fai-kernels | 1.9.1sarge4 | DSA-1184-2 |
| Debian 3.1 | kernel-source-2.6.8 | 2.6.8-16sarge5 | DSA-1184-2 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | kernel +8 | 2.6.9-34.0.1.EL | RHSA-2006:0493 |
Advisories 2
- RHSA-2006:0493 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1184-2 kernel-source-2.6.8 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm
- RHSA-2006:0493 vendor-advisory
- oval:org.mitre.oval:def:9927 vdb-entry signature
- [linux-security-module] 20050928 readv/writev syscalls are not checked by lsm mailing-list
- 20716 third-party-advisory
- 21745 third-party-advisory
- USN-302-1 vendor-advisory
- MDKSA-2006:123 vendor-advisory
- [linux-kernel] 20060426 [PATCH] LSM: add missing hook to do_compat_readv_writev() mailing-list
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=191524
- 25747 vdb-entry
- 21045 third-party-advisory
- 20237 third-party-advisory
- 22093 third-party-advisory
- DSA-1184 vendor-advisory
- 18105 vdb-entry