Home page logo
/

oss-sec logo oss-sec mailing list archives

CVE Request -- kernel: taskstats: use-after-free in xacct_add_tsk()
From: Petr Matousek <pmatouse () redhat com>
Date: Mon, 20 Aug 2012 19:25:11 +0200

An use-after-free flaw has been found in the way taskstat's
TASKSTATS_CMD_ATTR_PID command and exiting tasks with already freed mm
interacted. An unprivileged local user could use this flaw to crash the
system or leak kernel memory.

Please note that the fix below is from year 2006.

Upstream fix:
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=f0ec1aaf54caddd21c259aea8b2ecfbde4ee4fb9

References:
http://bugzilla.openvz.org/show_bug.cgi?id=2294
https://bugzilla.redhat.com/show_bug.cgi?id=849722

Thanks,
-- 
Petr Matousek / Red Hat Security Response Team


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]