Candidate: CVE-2005-2553 References: URL:http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2553 CONFIRM:http://lkml.org/lkml/2005/1/5/245 CONFIRM:http://linux.bkbits.net:8080/linux-2.4/cset@41dd3455GwQPufrGvBJjcUOXQa3WXA Description: The find_target function in ptrace32.c in the Linux kernel 2.4.x before 2.4.29 does not properly handle a NULL return value from another function, which allows local users to cause a denial of service (kernel crash/oops) by running a 32-bit ltrace program with the -i option on a 64-bit executable program. Bugs: upstream: released (2.4.29) linux-2.6: N/A 2.6.8-sarge-security: N/A 2.4.27-sid/sarge: pending [184_arch-x86_64-ia32-ptrace32-oops.diff] 2.4.27-sarge-security: released (2.4.27-10sarge1) [184_arch-x86_64-ia32-ptrace32-oops.diff] 2.4.19-woody-security: 2.4.18-woody-security: 2.4.17-woody-security: 2.4.16-woody-security: 2.4.17-woody-security-hppa: 2.4.17-woody-security-ia64: 2.4.18-woody-security-hppa: