Total vulnerabilities in the database
fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the add_to_page_cache_lru function, and subsequently attempts to unlock a page that was not locked, which allows local users to cause a denial of service (kernel BUG and system crash), as demonstrated by the fio I/O tool.
| Software | From | Fixed in |
|---|---|---|
| debian / debian_linux | 4.0 | 4.0.x |
| redhat / enterprise_linux | 5.0 | 5.0.x |
| linux / linux_kernel | - | 2.6.22.2 |