Description
arch/powerpc/mm/fsl_booke_mmu.c in KGDB in the Linux kernel 2.6.30 and other versions before 2.6.33, when running on PowerPC, does not properly perform a security check for access to a kernel page, which allows local users to overwrite arbitrary kernel memory, related to Fsl booke.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 5.0 | linux-2.6 | 2.6.26-22lenny1 | DSA-2053-1 |
Advisories 1
- DSA-2053-1 linux-2.6 - several issues Debian Security (DSA / DLA) · Mar 9, 2026
References
- SUSE-SA:2010:031 vendor-advisory
- kernel-kgdb-memory-overwrite(58840) vdb-entry
- [oss-security] 20100430 Re: CVE request - Linux Kernel KGDB/ppc issue mailing-list
- 40645 third-party-advisory
- [oss-security] 20100429 Re: CVE request - Linux Kernel KGDB/ppc issue mailing-list
- [linux-kernel] 20100510 [071/117] kgdb: dont needlessly skip PAGE_USER test for Fsl booke mailing-list
- DSA-2053 vendor-advisory
- 39830 third-party-advisory
- [oss-security] 20100429 CVE request - Linux Kernel KGDB/ppc issue mailing-list
- ADV-2010-1857 vdb-entry