Description
include/linux/init_task.h in the Linux kernel before 2.6.35 does not prevent signals with a process group ID of zero from reaching the swapper process, which allows local users to cause a denial of service (system crash) by leveraging access to this process group.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fa2755e20ab0c7215d99c2dc7c262e98a09b01df ↗
- https://github.com/torvalds/linux/commit/fa2755e20ab0c7215d99c2dc7c262e98a09b01df ↗
- https://github.com/torvalds/linux/commit/f20011457f41c11edb5ea5038ad0c8ea9f392023 ↗
- http://ftp.naist.jp/pub/linux/kernel/v2.6/ChangeLog-2.6.35 ↗
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f106eee10038c2ee5b6056aaf3f6d5229be6dcdd ↗
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f20011457f41c11edb5ea5038ad0c8ea9f392023 ↗
- http://www.openwall.com/lists/oss-security/2017/01/21/2 ↗
- https://github.com/torvalds/linux/commit/f106eee10038c2ee5b6056aaf3f6d5229be6dcdd ↗
- http://www.securityfocus.com/bid/97103 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=1358840 ↗