The sys_timer_create function in posix-timers.c for Linux kernel 2.6.x allows local users to cause a denial of service (memory consumption) and possibly bypass memory limits or cause other processes to be killed by creating a large number of posix timers, which are allocated in kernel memory but are not treated as part of the process memory.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Linux_kernel | Linux | 2.6.18.0 (including) | 2.6.18.0 (including) |
| Linux_kernel | Linux | 2.6.18.1 (including) | 2.6.18.1 (including) |
| Linux_kernel | Linux | 2.6.18.2 (including) | 2.6.18.2 (including) |
| Linux_kernel | Linux | 2.6.18.3 (including) | 2.6.18.3 (including) |
| Linux_kernel | Linux | 2.6.18.4 (including) | 2.6.18.4 (including) |
| Linux_kernel | Linux | 2.6.18.5 (including) | 2.6.18.5 (including) |
| Linux_kernel | Linux | 2.6.18.6 (including) | 2.6.18.6 (including) |
| Linux_kernel | Linux | 2.6.18.7 (including) | 2.6.18.7 (including) |
| Linux_kernel | Linux | 2.6.19 (including) | 2.6.19 (including) |
| Linux_kernel | Linux | 2.6.19.1 (including) | 2.6.19.1 (including) |
| Linux_kernel | Linux | 2.6.19.2 (including) | 2.6.19.2 (including) |
| Linux_kernel | Linux | 2.6.19.3 (including) | 2.6.19.3 (including) |
| Linux_kernel | Linux | 2.6.19.4 (including) | 2.6.19.4 (including) |
| Linux_kernel | Linux | 2.6.20 (including) | 2.6.20 (including) |
| Linux_kernel | Linux | 2.6.20.1 (including) | 2.6.20.1 (including) |
| Linux-source-2.6.15 | Ubuntu | dapper | * |