Bug 113502

Summary:	Resource leak when clearing posix timers on exec (CVE-2005-3271)
Product:	Gentoo Security	Reporter:	Sune Kloppenborg Jeppesen (RETIRED) <jaervosz>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	normal
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3271
Whiteboard:
Package list:		Runtime testing required:	---

Description Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev

2005-11-24 12:57:40 UTC

Not sure we have this one covered.  
 
Exec in Linux kernel 2.6 does not properly clear posix-timers in 
multi-threaded environments, which results in a resource leak and could allow 
a large number of multiple local users to cause a denial of service by using 
more posix-timers than specified by the quota for a single user.

Comment 1 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev

2005-11-25 12:52:38 UTC


*** This bug has been marked as a duplicate of 113323 ***