CVE-2007-6434

Linux kernel 2.6.23 allows local users to create low pages in virtual userspace memory and bypass mmap_min_addr protection via a crafted executable file that calls the do_brk function.

🔗 References (10)

• cve@mitrehttp://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.24-rc5
• cve@mitrehttp://osvdb.org/40907
• cve@mitrehttp://secunia.com/advisories/28070
• cve@mitrehttp://www.securityfocus.com/bid/26831
• cve@mitrehttp://www.vupen.com/english/advisories/2007/4200
• af854a3a-2127-422b-91ae-364da2661108http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.24-rc5
• af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/40907
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/28070
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/26831
• af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2007/4200