VDB
CVE-2007-6716
CVE-2007-6716
PUBLISHED
Reported by mitre · Published September 4, 2008
fs/direct-io.c in the dio subsystem in the Linux kernel before 2.6.23 does not properly zero out the dio struct, which allows local users to cause a denial of service (OOPS), as demonstrated by a certain fio test.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| linux | linux_kernel | |
| n/a | n/a | n/a, n/a, n/a |
Timeline
- Sep 4, 2008 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 21, 2022 EPSS Score
- Feb 12, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 7, 2023 EPSS Score
- May 30, 2023 EPSS Score
References
- SUSE-SA:2008:047 vendor-advisoryx_refsource_SUSE
- RHSA-2008:0885 vendor-advisoryx_refsource_REDHAT
- 32393 third-party-advisoryx_refsource_SECUNIA
- 32237 third-party-advisoryx_refsource_SECUNIA
- RHSA-2008:0972 vendor-advisoryx_refsource_REDHAT
- oval:org.mitre.oval:def:10053 vdb-entrysignaturex_refsource_OVAL
- SUSE-SA:2008:052 vendor-advisoryx_refsource_SUSE
- x_refsource_CONFIRM
- USN-659-1 vendor-advisoryx_refsource_UBUNTU
- [oss-security] 20080904 CVE request: kernel: dio: zero struct dio with kzalloc instead of manually mailing-listx_refsource_MLIST
- [linux-kernel] 20070731 Re: [PATCH] add check do_direct_IO() return val mailing-listx_refsource_MLIST
- SUSE-SA:2008:056 vendor-advisoryx_refsource_SUSE
- 32103 third-party-advisoryx_refsource_SECUNIA
- DSA-1653 vendor-advisoryx_refsource_DEBIAN
- 32356 third-party-advisoryx_refsource_SECUNIA
- x_refsource_CONFIRM
- 32023 third-party-advisoryx_refsource_SECUNIA
- 32759 third-party-advisoryx_refsource_SECUNIA
- MDVSA-2008:220 vendor-advisoryx_refsource_MANDRIVA
- 32370 third-party-advisoryx_refsource_SECUNIA
…and 5 more