Description
libata in the Linux kernel before 2.6.27.9 does not set minimum timeouts for SG_IO requests, which allows local users to cause a denial of service (Programmed I/O mode on drives) via multiple simultaneous invocations of an unspecified test program.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.redhat.com/support/errata/RHSA-2009-0331.html ↗
- http://www.redhat.com/support/errata/RHSA-2009-0326.html ↗
- http://secunia.com/advisories/33706 ↗
- http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html ↗
- http://secunia.com/advisories/37471 ↗
- http://www.redhat.com/support/errata/RHSA-2009-0053.html ↗
- http://secunia.com/advisories/33756 ↗
- http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=f2f1fa78a155524b849edf359e42a3001ea652c0 ↗
- http://www.vmware.com/security/advisories/VMSA-2009-0016.html ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=474495 ↗
- http://secunia.com/advisories/33758 ↗
- http://support.avaya.com/elmodocs2/security/ASA-2009-114.htm ↗
- http://secunia.com/advisories/34252 ↗
- http://openwall.com/lists/oss-security/2008/12/09/2 ↗
- http://www.securityfocus.com/archive/1/507985/100/0/threaded ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47669 ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10948 ↗
- http://secunia.com/advisories/34981 ↗
- https://usn.ubuntu.com/714-1/ ↗
- http://www.debian.org/security/2009/dsa-1787 ↗
- http://www.ubuntu.com/usn/usn-715-1 ↗
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.9 ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8606 ↗
- http://secunia.com/advisories/33854 ↗
- http://www.vupen.com/english/advisories/2009/3316 ↗
- http://secunia.com/advisories/34762 ↗