The install_special_mapping function in mm/mmap.c in the Linux kernel before 2.6.37-rc6 does not make an expected security_file_mmap function call, which allows local users to bypass intended mmap_min_addr restrictions and possibly conduct NULL pointer dereference attacks via a crafted assembly-language application.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Linux_kernel | Linux | * | 2.6.37 (excluding) |
Linux_kernel | Linux | 2.6.37 (including) | 2.6.37 (including) |
Linux_kernel | Linux | 2.6.37-rc1 (including) | 2.6.37-rc1 (including) |
Linux_kernel | Linux | 2.6.37-rc2 (including) | 2.6.37-rc2 (including) |
Linux_kernel | Linux | 2.6.37-rc3 (including) | 2.6.37-rc3 (including) |
Linux_kernel | Linux | 2.6.37-rc4 (including) | 2.6.37-rc4 (including) |
Linux_kernel | Linux | 2.6.37-rc5 (including) | 2.6.37-rc5 (including) |