PT-2009-5206 · Linux+1 · Linux Kernel+1
Jens Rosenboom
·
Published
2009-08-18
·
Updated
2020-08-28
·
CVE-2009-2848
CVSS v2.0
5.9
Medium
| Vector | AV:L/AC:M/Au:N/C:P/I:P/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 2.6.30-rc6
Description
The issue is related to the
execve function in the Linux kernel, which does not properly clear the current->clear child tid pointer. This can be exploited by local users to cause a denial of service, resulting in memory corruption, or possibly gain privileges. The exploitation is possible via a clone system call with CLONE CHILD SETTID or CLONE CHILD CLEARTID enabled, which is not properly handled during thread creation and exit.Recommendations
For Linux kernel versions prior to 2.6.30-rc6, consider updating to a newer version to mitigate the risk of exploitation. As a temporary workaround, consider restricting the use of the
clone system call with CLONE CHILD SETTID or CLONE CHILD CLEARTID enabled until a patch is available.Exploit
Fix
DoS
Improper Privilege Management
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Red Hat