Linux Kernel ptrace Race Condition Lets Local Users Deny Service
|
|
SecurityTracker Alert ID: 1020362
|
|
SecurityTracker URL: http://securitytracker.com/id?1020362
|
|
CVE Reference: CVE-2008-2365
(Links to External Site)
|
Date: Jun 25 2008
|
Impact: Denial of service via local system
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Version(s): 2.6
|
Description: A vulnerability was reported in Linux Kernel. A local user can cause denial of service conditions.
A local user can invoke ptrace and exploit a race condition to cause the target kernel to hang.
Alexey Dobriyan reported this vulnerability.
|
Impact: A local user can cause the kernel to hang.
|
Solution: The vendor has issued a fix.
|
Vendor URL: www.kernel.org/ (Links to External Site)
|
Cause: State error
|
Underlying OS: Linux (Caldera/SCO), Linux (Conectiva), Linux (Debian), Linux (EnGarde), Linux (Gentoo), Linux (HP Secure OS), Linux (Immunix), Linux (Mandriva/Mandrake), Linux (Progeny Debian), Linux (Red Hat Enterprise), Linux (Red Hat Fedora), Linux (Red Hat Linux), Linux (SGI), Linux (Slackware), Linux (Sun), Linux (SuSE), Linux (Trustix), Linux (Turbo Linux), Linux (Ubuntu), Linux (Xandros)
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
Date: Wed, 25 Jun 2008 14:47:41 -0400
Subject: Linux Kernel
|
Red Hat:
* Alexey Dobriyan discovered a race condition in the Linux kernel
process-tracing system call, ptrace. A local unprivileged user could
use this flaw to cause a denial of service (kernel hang).
(CVE-2008-2365, Important)
|
|
