Published: 04/09/2008 Updated: 07/11/2023

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 436

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

fs/direct-io.c in the dio subsystem in the Linux kernel prior to 2.6.23 does not properly zero out the dio struct, which allows local users to cause a denial of service (OOPS), as demonstrated by a certain fio test.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
canonical ubuntu linux 7.10
canonical ubuntu linux 8.04
canonical ubuntu linux 6.06
debian debian linux 4.0
novell linux desktop 9
opensuse opensuse 10.3
suse suse linux enterprise server 10
suse suse linux enterprise desktop 10

It was discovered that the direct-IO subsystem did not correctly validate certain structures A local attacker could exploit this to cause a system crash, leading to a denial of service (CVE-2007-6716) ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix various security issues and several bugsare now available for Red Hat Enterprise Linux 5This update has been rated as having important security impact by the RedHat Secur ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that resolve several security issues and fixvarious bugs are now available for Red Hat Enterprise Linux 4This update has been rated as having important security impact by the RedH ...

NVD-CWE-noinfo http://lkml.org/lkml/2007/7/30/448 http://www.openwall.com/lists/oss-security/2008/09/04/1 https://bugzilla.redhat.com/show_bug.cgi?id=461082 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23 http://www.redhat.com/support/errata/RHSA-2008-0885.html http://secunia.com/advisories/32023 http://www.ubuntu.com/usn/usn-659-1 http://secunia.com/advisories/32393 http://secunia.com/advisories/32799 http://rhn.redhat.com/errata/RHSA-2008-0972.html http://secunia.com/advisories/32759 http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00000.html http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html http://secunia.com/advisories/32103 http://secunia.com/advisories/32237 http://www.securityfocus.com/bid/31515 http://www.debian.org/security/2008/dsa-1653 http://www.mandriva.com/security/advisories?name=MDVSA-2008:220 http://secunia.com/advisories/32356 http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html http://secunia.com/advisories/32370 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10053 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=848c4dd5153c7a0de55470ce99a8e13a63b4703f https://usn.ubuntu.com/659-1/https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-6716

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect