Your submission was sent successfully! Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

CVE-2007-6712

Published: 12 April 2008

Integer overflow in the hrtimer_forward function (hrtimer.c) in Linux kernel 2.6.21-rc4, when running on 64-bit systems, allows local users to cause a denial of service (infinite loop) via a timer with a large expiry value, which causes the timer to always be expired.

From the Ubuntu Security Team

Johannes Bauer discovered that the 64bit kernel did not correctly handle hrtimer updates. A local attacker could request a large expiration value and cause the system to hang, leading to a denial of service.

Notes

AuthorNote
kees
fixed upstream in two ways (see patch list)

Priority

Medium

Status

Package Release Status
linux
Launchpad, Ubuntu, Debian
dapper Does not exist

edgy Does not exist

feisty Does not exist

gutsy Does not exist

hardy Not vulnerable

upstream
Released (2.6.25~rc2)
Patches:
other: http://git.kernel.org/?p=linux/kernel/git/chris/linux-2.6.git;a=commitdiff;h=13788ccc41ceea5893f9c747c59bc0b28f2416c2
upstream: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=5a7780e725d1bb4c3094fcc12f1c5c5faea1e988
linux-source-2.6.15
Launchpad, Ubuntu, Debian
dapper Not vulnerable

edgy Does not exist

feisty Does not exist

gutsy Does not exist

hardy Does not exist

upstream
Released (2.6.25~rc2)
linux-source-2.6.17
Launchpad, Ubuntu, Debian
dapper Does not exist

edgy Ignored
(end of life)
feisty Does not exist

gutsy Does not exist

hardy Does not exist

upstream
Released (2.6.25~rc2)
linux-source-2.6.20
Launchpad, Ubuntu, Debian
dapper Does not exist

edgy Does not exist

feisty
Released (2.6.20-17.37)
gutsy Does not exist

hardy Does not exist

upstream
Released (2.6.25~rc2)
linux-source-2.6.22
Launchpad, Ubuntu, Debian
dapper Does not exist

edgy Does not exist

feisty Does not exist

gutsy
Released (2.6.22-15.56)
hardy Does not exist

upstream
Released (2.6.25~rc2)