The ldm_parse_vmdb function in fs/partitions/ldm.c in the Linux kernel before 2.6.38-rc6-git6 does not validate the VBLK size value in the VMDB structure in an LDM partition table, which allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted partition table.
The product divides a value by zero.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Linux_kernel | Linux | * | 2.6.38 (excluding) |
Linux_kernel | Linux | 2.6.38 (including) | 2.6.38 (including) |
Linux_kernel | Linux | 2.6.38-rc1 (including) | 2.6.38-rc1 (including) |
Linux_kernel | Linux | 2.6.38-rc2 (including) | 2.6.38-rc2 (including) |
Linux_kernel | Linux | 2.6.38-rc3 (including) | 2.6.38-rc3 (including) |
Linux_kernel | Linux | 2.6.38-rc4 (including) | 2.6.38-rc4 (including) |
Linux_kernel | Linux | 2.6.38-rc5 (including) | 2.6.38-rc5 (including) |