Bug 189799

Summary:	Linux Kernel < 2.6.22.4 Parent Process Death Signal (CVE-2007-3848)
Product:	Gentoo Security	Reporter:	Christian Heim (RETIRED) <phreak>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	kernel
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://marc.info/?l=bugtraq&m=118711306802632&w=2
Whiteboard:	[linux < 2.6.22.4][gp < 2.6.22-6]
Package list:		Runtime testing required:	---

Description Christian Heim (RETIRED) gentoo-dev

2007-08-22 08:08:31 UTC

An unprivileged local user may send arbitrary signal to a child process
despite security restrictions.

Comment 1 Mike Pagano gentoo-dev

2008-03-21 11:56:01 UTC

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=d2d56c5f51028cb9f3d800882eb6f4cbd3f9099f

Fixed in 2.6.22.4 provided in genpatches 2.6.22-6