189799 – Linux Kernel < 2.6.22.4 Parent Process Death Signal (CVE-2007-3848)

Bug 189799 - Linux Kernel < 2.6.22.4 Parent Process Death Signal (CVE-2007-3848)

Summary: Linux Kernel < 2.6.22.4 Parent Process Death Signal (CVE-2007-3848)

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Kernel (show other bugs)
Hardware:	All Linux

Importance:	High normal (vote)
Assignee:	Gentoo Security

URL:	http://marc.info/?l=bugtraq&m=1187113...
Whiteboard:	[linux < 2.6.22.4][gp < 2.6.22-6]
Keywords:

Depends on:
Blocks:

Reported:	2007-08-22 08:08 UTC by Christian Heim (RETIRED)
Modified:	2013-09-03 03:45 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Christian Heim (RETIRED) gentoo-dev

2007-08-22 08:08:31 UTC

An unprivileged local user may send arbitrary signal to a child process
despite security restrictions.

Comment 1 Mike Pagano gentoo-dev

2008-03-21 11:56:01 UTC

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=d2d56c5f51028cb9f3d800882eb6f4cbd3f9099f

Fixed in 2.6.22.4 provided in genpatches 2.6.22-6