Reported late last year and doesn't seem to have it's own bug yet: Normally, when a process dies it becomes a zombie. If the parent dies (before or after the child), the child is adopted by init. Init will reap the child. The program included below DOES NOT get reaped. Do like so: gcc -m32 -O2 -std=gnu99 -o foo foo.c while true; do killall -9 foo; ./foo; sleep 1; done
Another one that took some digging. I'll post this info to CVE too. proposed metadata: [linux < 2.6.16.47] [linux < 2.6.19.3] The commit IDs are (respectively): f95540a5193f909b5700555ceafc69bcb13d2174 b4e8b1a91dd54ad653036367a11ff8b7cf109534 Note: I couldn't find the commit IDs at git.kernel.org.. but they exist in the corresponding changelogs: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.47 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.19.3 [gp < 2.6.19-3]
metadata correction: [gp < 2.6.19-3] should be [gp < 2.6.19-7]