CVE-2009-3888 - The do_mmap_pgoff function in mm/nommu.c in the Linux kernel before 2.6.31.6, when the CPU lacks a memory management unit, allows local users to cause a denial of service (OOPS) via an application that attempts to allocate a large amount of memory

Back Back to CVE browser

MEDIUM

The do_mmap_pgoff function in mm/nommu.c in the Linux kernel before 2.6.31.6, when the CPU lacks a memory management unit, allows local users to cause a denial of service (OOPS) via an application that attempts to allocate a large amount of memory

Published Nov 16, 2009

4.9

MEDIUM

CVSS 2.0

EPSS 0.75%

Description

The do_mmap_pgoff function in mm/nommu.c in the Linux kernel before 2.6.31.6, when the CPU lacks a memory management unit, allows local users to cause a denial of service (OOPS) via an application that attempts to allocate a large amount of memory.

Affected products

Remediation

Red Hat statement

Not vulnerable. The Linux kernels as shipped with Red Hat Enterprise Linux 3, 4, 5, and Red Hat Enterprise MRG did not have MMU disabled, and therefore are not affected by this issue.

Weaknesses (1)

CWE-399

References (9)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=89a8640279f8bb78aaf778d1fc5c4a6778f18064
x_refsource_CONFIRM
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.6
x_refsource_CONFIRMVendor Advisory
http://www.openwall.com/lists/oss-security/2009/11/09/2
mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2009/11/13/3
mailing-listx_refsource_MLIST
http://www.ubuntu.com/usn/usn-864-1
vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/security/cve/CVE-2009-3888
Vendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-3859
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2009-3888
https://www.cve.org/CVERecord?id=CVE-2009-3888

Link	Providers	Tags
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=89a8640279f8bb78aaf778d1fc5c4a6778f18064		x_refsource_CONFIRM
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.6		x_refsource_CONFIRMVendor Advisory
http://www.openwall.com/lists/oss-security/2009/11/09/2		mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2009/11/13/3		mailing-listx_refsource_MLIST
http://www.ubuntu.com/usn/usn-864-1		vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/security/cve/CVE-2009-3888		Vendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-3859		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2009-3888
https://www.cve.org/CVERecord?id=CVE-2009-3888