The do_mmap_pgoff function in mm/nommu.c in the Linux kernel before 2.6.31.6, when the CPU lacks a memory management unit, allows local users to cause a denial of service (OOPS) via an application that attempts to allocate a large amount of memory.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 2.0 | 4.9 | MEDIUM | AV:L/AC:L/Au:N/C:N/I:N/A:C |
Not vulnerable. The Linux kernels as shipped with Red Hat Enterprise Linux 3, 4, 5, and Red Hat Enterprise MRG did not have MMU disabled, and therefore are not affected by this issue.
| Hyperlink | Source | Resource |
|---|---|---|
| http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=89a8640279f8bb78aaf778d1fc5c4a6778f18064 | secalert@redhat.com | N/A |
| http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.6 | secalert@redhat.com | Vendor Advisory |
| http://www.openwall.com/lists/oss-security/2009/11/09/2 | secalert@redhat.com | N/A |
| http://www.openwall.com/lists/oss-security/2009/11/13/3 | secalert@redhat.com | N/A |
| http://www.ubuntu.com/usn/usn-864-1 | secalert@redhat.com | N/A |