header-logo
Suggest Exploit
vendor:
Kernel
by:
SecurityFocus
7.2
CVSS
HIGH
Invalid ELF Core Layout
N/A
CWE
Product Name: Kernel
Affected Version From: 2.2.2000
Affected Version To: 2.2.2000
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Linux
2002

Linux Kernel 2.2.0 Reboot Vulnerability

Due to a rare and subtle bug in the 2.2.0 kernel, a linux machine can be forced to reboot by an unpriviliged local user. The reason for this is because of the invalid ELF core layout and the fact that munmap wipes out a vital page table entry.

Mitigation:

Upgrade to a newer version of the Linux Kernel
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/344/info


Due to a rare and subtle bug in the 2.2.0 kernel, a linux machine can be forced to reboot by an unpriviliged local user. The reason for this is because of the invalid ELF core layout and the fact that munmap wipes out a vital page table entry.

Only kernel 2.2.0 is vulnerable to this.


Take any core file,

[user@box tmp]$ ldd core

[reboot]