Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 282003 (CVE-2009-2848)

Summary: Kernel: execve() clone syscall DoS (CVE-2009-2848)
Product: Gentoo Security Reporter: Alex Legler (RETIRED) <a3li>
Component: KernelAssignee: Gentoo Security <security>
Severity: normal CC: hardened-kernel+disabled, kernel
Priority: High    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard: [linux <2.6.31]
Package list:
Runtime testing required: ---

Description Alex Legler (RETIRED) archtester gentoo-dev Security 2009-08-19 09:34:29 UTC
CVE-2009-2848 (
  The execve function in unspecified versions of the Linux kernel does
  not clear the current->clear_child_tid pointer, which allows local
  users to cause a denial of service (memory corruption) via a clone
  system call with CLONE_CHILD_SETTID or CLONE_CHILD_CLEARTID enabled,
  which is not properly handled during thread creation and exit.