Description
The TSB I-TLB load implementation in arch/sparc/kernel/tsb.S in the Linux kernel before 2.6.33 on the SPARC platform does not properly obtain the value of a certain _PAGE_EXEC_4U bit and consequently does not properly implement a non-executable stack, which makes it easier for context-dependent attackers to exploit stack-based buffer overflows via a crafted application.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 5.0 | linux-2.6 | 2.6.26-22lenny1 | DSA-2053-1 |
Advisories 1
- DSA-2053-1 linux-2.6 - several issues Debian Security (DSA / DLA) · Mar 9, 2026
References
- [oss-security] 20100224 kernel: execution possible in non-executable mappings in recent 2.6 kernels (SPARC only) mailing-list
- [linux-sparc] 20100219 Execution possible in non-executable mappings in recent 2.6 kernels mailing-list
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.33
- [oss-security] 20100505 Re: CVE Request [was Re: kernel: execution possible in non-executable mappings in recent 2.6 kernels (SPARC only)] mailing-list
- [linux-sparc] 20100219 Re: Execution possible in non-executable mappings in recent 2.6 kernels mailing-list
- DSA-2053 vendor-advisory
- 39830 third-party-advisory