PT-2009-5837 · Linux+1 · Linux Kernel+1
CVSS v2.0
6.9
Média
| Vetor | AV:L/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 2.6.32-rc6
Description
The issue is related to multiple race conditions in the fs/pipe.c file of the Linux kernel. This can be exploited by local users to cause a denial of service, resulting in a NULL pointer dereference and system crash, or potentially gain privileges. The exploitation involves attempting to open an anonymous pipe via a /proc/*/fd/ pathname.
Recommendations
For Linux kernel versions prior to 2.6.32-rc6, update to version 2.6.32-rc6 or later to resolve the issue.
Exploit
Correção
DoS
NULL Pointer Dereference
Race Condition
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Linux Kernel
Red Hat