Bug 320965 (CVE-2010-1162)

Summary:	Kernel: release_one_tty() privilege escalation (CVE-2010-1162)
Product:	Gentoo Security	Reporter:	Stefan Behte (RETIRED) <craig>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	hardened-kernel+disabled, kernel
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=6da8d866d0d39e9509ff826660f6a86a6757c966
Whiteboard:	[ linux < 2.6.34-rc4 ]
Package list:		Runtime testing required:	---

Description Stefan Behte (RETIRED) gentoo-dev

2010-05-21 22:01:04 UTC

CVE-2010-1162 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-1162):
  The release_one_tty function in drivers/char/tty_io.c in the Linux
  kernel before 2.6.34-rc4 omits certain required calls to the put_pid
  function, which has unspecified impact and local attack vectors.