Title: Linux Kernel ftdi_sio Serial Port Data Saturation Local DoS
Info
Disclosure
Jul 04, 2006
Discovery
Unknown
Dates
Exploit
Unknown
Solution
Unknown
Description
The Linux kernel contains a flaw that may allow a local denial of service. The issue is triggered because the 'ftdi_sio' serial driver cannot handle data at the rate it can be queued for, which may lead to consumption of all system memory resulting in loss of availability for the platform.
Classification
Location:
Local Access Required
Attack Type:
Denial of Service
Impact:
Loss of Availability
Exploit:
Exploit Rumored
Disclosure:
OSVDB Verified
Solution
Upgrade to version 2.6.16.27 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.