Integer overflow in the hrtimer_start function in kernel/hrtimer.c in the Linux kernel before 2.6.23.10 allows local users to execute arbitrary code or cause a denial of service (panic) via a large relative timeout value. NOTE: some of these details are obtained from third party information.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | 2.6.23.4 | 2.6.23.4.x |
| linux / linux_kernel | 2.6.23.7 | 2.6.23.7.x |
| linux / linux_kernel | 2.6.23.1 | 2.6.23.1.x |
| linux / linux_kernel | 2.6.23-rc2 | 2.6.23-rc2.x |
| linux / linux_kernel | 2.6.23.9 | 2.6.23.9.x |
| linux / linux_kernel | 2.6.23.3 | 2.6.23.3.x |
| linux / linux_kernel | 2.6.23-rc1 | 2.6.23-rc1.x |
| linux / linux_kernel | 2.6.23 | 2.6.23.x |
| linux / linux_kernel | 2.6.23.2 | 2.6.23.2.x |
| linux / linux_kernel | 2.6.23.5 | 2.6.23.5.x |
| linux / linux_kernel | 2.6.23.6 | 2.6.23.6.x |