CVE-2010-1643

Publication date 3 June 2010

Last updated 24 July 2024

Ubuntu priority

mm/shmem.c in the Linux kernel before 2.6.28-rc3, when strict overcommit is enabled, does not properly handle the export of shmemfs objects by knfsd, which allows attackers to cause a denial of service (NULL pointer dereference and knfsd crash) or possibly have unspecified other impact via unknown vectors.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
linux	10.04 LTS lucid	Not affected
	9.10 karmic	Not affected
	9.04 jaunty	Not affected
	8.04 LTS hardy	Fixed 2.6.24-28.73
	6.06 LTS dapper	Not in release
linux-source-2.6.15	10.04 LTS lucid	Not in release
	9.10 karmic	Not in release
	9.04 jaunty	Not in release
	8.04 LTS hardy	Not in release
	6.06 LTS dapper	Fixed 2.6.15-55.86

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
linux	Upstream: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=731572d39fcd3498702eda4600db4c43d51e0b26 Hardy: http://chinstrap.ubuntu.com/~smb/CVEs/CVE-2010-1643/patches/hardy/linux/0001-nfsd-fix-vm-overcommit-crash.txt
linux-source-2.6.15	Dapper: http://chinstrap.ubuntu.com/~smb/CVEs/CVE-2010-1643/patches/dapper/linux/0001-nfsd-fix-vm-overcommit-crash.txt

References

Related Ubuntu Security Notices (USN)

USN-966-1
Linux kernel vulnerabilities
4 August 2010

CVE-2010-1643

Status

Patch details

References

Related Ubuntu Security Notices (USN)

Other references