medium4.9Public exploit code
CVE-2009-3888
The do_mmap_pgoff function in mm/nommu.c in the Linux kernel before 2.6.31.6, when the CPU lacks a memory management unit, allows local users to cause a denial…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Linux Kernel 2.6.x - 'fput()' Null Pointer Dereference Local Denial of Service2009-11-09 · dos · linux · Verified
Impact
The do_mmap_pgoff function in mm/nommu.c in the Linux kernel before 2.6.31.6, when the CPU lacks a memory management unit, allows local users to cause a denial of service (OOPS) via an application that attempts to allocate a large amount of memory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | through 2.6.31.5 Versions 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=89a8640279f8bb78aaf778d1fc5c4a6778f18064
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.6
- http://www.openwall.com/lists/oss-security/2009/11/09/2
- http://www.openwall.com/lists/oss-security/2009/11/13/3
- http://www.ubuntu.com/usn/usn-864-1
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=89a8640279f8bb78aaf778d1fc5c4a6778f18064
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.6
- http://www.openwall.com/lists/oss-security/2009/11/09/2
- http://www.openwall.com/lists/oss-security/2009/11/13/3
- http://www.ubuntu.com/usn/usn-864-1