Description
Linux kernel 2.6.17 and earlier, when running on IA64 or SPARC platforms, allows local users to cause a denial of service (crash) via a malformed ELF file that triggers memory maps that cross region boundaries.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.1 | kernel-source-2.4.27 | 2.4.27-10sarge5 | DSA-1237-1 |
| Debian 3.1 | kernel-source-2.6.8 | 2.6.8-16sarge6 | DSA-1233-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | kernel +8 | 2.6.9-42.0.8.EL | RHSA-2007:0014 |
| RHEL 3 | kernel +8 | 2.4.21-53.EL | RHSA-2007:1049 |
| RHEL 2 | kernel +3 | 2.4.18-e.67 | RHSA-2008:0787 |
Advisories 5
- RHSA-2007:0014 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2007:1049 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1237-1 kernel-source-2.4.27 - several Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1233-1 kernel-source-2.6.8 - several Debian Security (DSA / DLA) · Mar 9, 2026
- RHSA-2008:0787 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- SUSE-SA:2006:079 vendor-advisory
- oval:org.mitre.oval:def:10301 vdb-entry signature
- RHSA-2007:1049 vendor-advisory
- 27913 third-party-advisory
- RHSA-2007:0014 vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm
- http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.11
- DSA-1237 vendor-advisory
- 33280 third-party-advisory
- 24206 third-party-advisory
- 23474 third-party-advisory
- 21967 third-party-advisory
- USN-347-1 vendor-advisory
- ADV-2006-3670 vdb-entry
- DSA-1233 vendor-advisory
- 23370 third-party-advisory
- 21999 third-party-advisory
- http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.17.y.git%3Ba=commit%3Bh=8833ebaa3f4325820fe3338ccf6fae04f6669254
- 23997 third-party-advisory
- 24482 third-party-advisory
- http://lkml.org/lkml/2006/9/4/116
- 19702 vdb-entry
- RHSA-2008:0787 vendor-advisory
- 23395 third-party-advisory
- MDKSA-2007:060 vendor-advisory