Description
The ABI in the Linux kernel 2.6.28 and earlier on s390, powerpc, sparc64, and mips 64-bit platforms requires that a 32-bit argument in a 64-bit register was properly sign extended when sent from a user-mode application, but cannot verify this, which allows local users to cause a denial of service (crash) or possibly gain privileges via a crafted system call.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 5.0 | linux-2.6 | 2.6.26-13lenny2 | DSA-1749-1 |
| Debian 4.0 | fai-kernels | 1.17+etch.24etch2 | DSA-1794-1 |
| Debian 4.0 | linux-2.6 | 2.6.18.dfsg.1-24etch2 | DSA-1794-1 |
| Debian 4.0 | linux-2.6.24 | 2.6.24-6~etchnhalf.8etch1 | DSA-1787-1 |
| Debian 4.0 | user-mode-linux | 2.6.18-1um-2etch.24etch2 | DSA-1794-1 |
Advisories 3
- DSA-1787-1 linux-2.6.24 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1749-1 linux-2.6 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1794-1 linux-2.6 - multiple vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- MDVSA-2009:135 vendor-advisory
- 33477 third-party-advisory
- SUSE-SA:2009:010 vendor-advisory
- 33275 vdb-entry
- DSA-1749 vendor-advisory
- DSA-1794 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=479969
- 33674 third-party-advisory
- 35011 third-party-advisory
- 34981 third-party-advisory
- 34394 third-party-advisory
- DSA-1787 vendor-advisory
- FEDORA-2009-0816 vendor-advisory
- [linux-kernel] 20090110 Re: [PATCH -v7][RFC]: mutex: implement adaptive spinning mailing-list