From 6471f3dab8b9f08bf043c1fcc49f8a0bf467300a Mon Sep 17 00:00:00 2001
From: Moritz Muehlenhoff <jmm@debian.org>
Date: Mon, 30 Apr 2007 17:08:05 +0000
Subject: retire several issues

git-svn-id: svn+ssh://svn.debian.org/svn/kernel-sec@774 e094ebfe-e918-0410-adfb-c712417f3574
---
 retired/CVE-2006-5173 | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 retired/CVE-2006-5173

(limited to 'retired/CVE-2006-5173')

diff --git a/retired/CVE-2006-5173 b/retired/CVE-2006-5173
new file mode 100644
index 000000000..9f18d25ec
--- /dev/null
+++ b/retired/CVE-2006-5173
@@ -0,0 +1,26 @@
+Candidate: CVE-2006-5173
+References: 
+ http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=47a5c6fa0e204a2b63309c648bb2fde36836c826
+Description:
+ Alignment Check (AC) flag in EFLAGS is not saved/restored during task
+ switch, thus was leaking to other tasks. Those eventually died with a
+ SIGBUS.
+Ubuntu-Description:
+ The task switching code did not save and restore EFLAGS of processes.
+ By starting a specially crafted executable, a local attacker could
+ exploit this to eventually crash many other running processes.
+Notes: 
+ incorrect optimization in some later 2.6.x kernel, reverted
+ Local DoS.
+
+ Are we sure this affects 2.6.17 and before? The CFI_ADJUST_CFA_OFFSET
+ doesn't seem to be present in these kernels.
+Bugs: 
+upstream: released (2.6.18)
+linux-2.6: released (2.6.18-1)
+2.6.8-sarge-security: N/A
+2.4.27-sarge-security: N/A
+2.6.10-hoary-security: N/A
+2.6.12-breezy-security: N/A
+2.6.15-dapper-security: released (2.6.15-27.49)
+2.6.17-edgy: released (2.6.17.1-10.34)
-- 
cgit v1.2.3