oss-sec: CVE Request -- kernel: taskstats: use-after-free in xacct_add_tsk()

[Petr Matousek <pmatouse () redhat com>]

An use-after-free flaw has been found in the way taskstat's
TASKSTATS_CMD_ATTR_PID command and exiting tasks with already freed mm
interacted. An unprivileged local user could use this flaw to crash the
system or leak kernel memory.

Please note that the fix below is from year 2006.

Upstream fix:
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=f0ec1aaf54caddd21c259aea8b2ecfbde4ee4fb9

References:
http://bugzilla.openvz.org/show_bug.cgi?id=2294
https://bugzilla.redhat.com/show_bug.cgi?id=849722

Thanks,
-- 
Petr Matousek / Red Hat Security Response Team