Integer overflow in the hrtimer_forward function (hrtimer.c) in Linux kernel 2.6.21-rc4, when running on 64-bit systems, allows local users to cause a denial of service (infinite loop) via a timer with a large expiry value, which causes the timer to always be expired.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Linux_kernel | Kernel | 2.6.21_rc4 (including) | 2.6.21_rc4 (including) |
| MRG for RHEL-5 | RedHat | kernel-rt-0:2.6.24.7-74.el5rt | * |
| Red Hat Enterprise Linux 5 | RedHat | kernel-0:2.6.18-53.1.21.el5 | * |
| Linux | Ubuntu | upstream | * |
| Linux-source-2.6.15 | Ubuntu | upstream | * |
| Linux-source-2.6.17 | Ubuntu | edgy | * |
| Linux-source-2.6.17 | Ubuntu | upstream | * |
| Linux-source-2.6.20 | Ubuntu | feisty | * |
| Linux-source-2.6.20 | Ubuntu | upstream | * |
| Linux-source-2.6.22 | Ubuntu | gutsy | * |
| Linux-source-2.6.22 | Ubuntu | upstream | * |