CVE-2008-2137

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.4.36.5 Linux kernel versions prior to 2.6.25.3

Description The issue concerns the sparc mmap check function in arch/sparc/kernel/sys sparc.c and the sparc64 mmap check function in arch/sparc64/kernel/sys sparc.c. These functions omit some virtual-address range checks when the mmap MAP FIXED bit is not set. This allows local users to cause a denial of service, resulting in a system panic, via unspecified mmap calls.

Recommendations For Linux kernel versions prior to 2.4.36.5, update to version 2.4.36.5 or later to resolve the issue. For Linux kernel versions prior to 2.6.25.3, update to version 2.6.25.3 or later to resolve the issue.