The load_flat_shared_library function in fs/binfmt_flat.c in the flat subsystem in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by executing a shared flat binary, which triggers an access of an uninitialized cred pointer.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Linux_kernel | Linux | * | 2.6.31 (excluding) |
| Linux_kernel | Linux | 2.6.31-rc1 (including) | 2.6.31-rc1 (including) |
| Linux_kernel | Linux | 2.6.31-rc2 (including) | 2.6.31-rc2 (including) |
| Linux_kernel | Linux | 2.6.31-rc3 (including) | 2.6.31-rc3 (including) |
| Linux_kernel | Linux | 2.6.31-rc4 (including) | 2.6.31-rc4 (including) |
| Linux_kernel | Linux | 2.6.31-rc5 (including) | 2.6.31-rc5 (including) |
| Linux | Ubuntu | upstream | * |