Your submission was sent successfully! Close

CVE-2007-6712

Published: 12 April 2008

Integer overflow in the hrtimer_forward function (hrtimer.c) in Linux kernel 2.6.21-rc4, when running on 64-bit systems, allows local users to cause a denial of service (infinite loop) via a timer with a large expiry value, which causes the timer to always be expired.

From the Ubuntu security team

Johannes Bauer discovered that the 64bit kernel did not correctly handle hrtimer updates. A local attacker could request a large expiration value and cause the system to hang, leading to a denial of service.

Priority

Medium

Status

Package Release Status
linux
Launchpad, Ubuntu, Debian
dapper Does not exist

edgy Does not exist

feisty Does not exist

gutsy Does not exist

hardy Not vulnerable

upstream
Released (2.6.25~rc2)
linux-source-2.6.15
Launchpad, Ubuntu, Debian
dapper Not vulnerable

edgy Does not exist

feisty Does not exist

gutsy Does not exist

hardy Does not exist

upstream
Released (2.6.25~rc2)
linux-source-2.6.17
Launchpad, Ubuntu, Debian
dapper Does not exist

edgy Ignored
(EOL)
feisty Does not exist

gutsy Does not exist

hardy Does not exist

upstream
Released (2.6.25~rc2)
linux-source-2.6.20
Launchpad, Ubuntu, Debian
dapper Does not exist

edgy Does not exist

feisty
Released (2.6.20-17.37)
gutsy Does not exist

hardy Does not exist

upstream
Released (2.6.25~rc2)
linux-source-2.6.22
Launchpad, Ubuntu, Debian
dapper Does not exist

edgy Does not exist

feisty Does not exist

gutsy
Released (2.6.22-15.56)
hardy Does not exist

upstream
Released (2.6.25~rc2)