CVE-2006-4342 — Improper Locking in Redhat Enterprise Linux

CWE-667 — Improper LockingCWE-833 — Deadlock7 documents5 sources
Severity
5.5MEDIUMNVD
EPSS
0.2%
top 62.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Redhat Enterprise Linux
Timeline
PublishedOct 17
Latest updateMay 1

Description

The kernel in Red Hat Enterprise Linux 3, when running on SMP systems, allows local users to cause a denial of service (deadlock) by running the shmat function on an shm at the same time that shmctl is removing that shm (IPC_RMID), which prevents a spinlock from being unlocked.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages0 packages

Also affects: Enterprise Linux 3.0

🔴Vulnerability Details

1
GHSA
GHSA-876r-chc7-85m3: The kernel in Red Hat Enterprise Linux 3, when running on SMP systems, allows local users to cause a denial of service (deadlock) by running the shmat↗2022-05-01
▶

📋Vendor Advisories

1
Red Hat
security flaw↗2006-10-13
▶

📐Framework References

2
CWE
Deadlock↗
▶
CWE
Improper Locking↗
▶

💬Community

2
Bugzilla
CVE-2006-4342 security flaw↗2018-08-16
▶
Bugzilla
CVE-2006-4342 shmat hangs by simultaneous shmctl(IPC_RMID)↗2006-09-07
▶