NetSight
IP …
medium5.5

CVE-2010-3079

kernel/trace/ftrace.c in the Linux kernel before 2.6.35.5, when debugfs is enabled, does not properly handle interaction between mutex possession and llseek op…

Impact

kernel/trace/ftrace.c in the Linux kernel before 2.6.35.5, when debugfs is enabled, does not properly handle interaction between mutex possession and llseek operations, which allows local users to cause a denial of service (NULL pointer dereference and outage of all function tracing files) via an lseek call on a file descriptor associated with the set_ftrace_filter file.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 2.6.35.5
CanonicalUbuntu Linux
Versions 9.10, 10.04, 10.10
SuseLinux Enterprise Desktop
Version 11
SuseLinux Enterprise High Availability Extension
Version 11
SuseLinux Enterprise Server
Version 11

Weakness classification

CWE-476

References