Linux Kernel Local IO Access Inheritance Vulnerability
BID:10302
Info
Linux Kernel Local IO Access Inheritance Vulnerability
| Bugtraq ID: | 10302 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | May 07 2004 12:00AM |
| Updated: | May 07 2004 12:00AM |
| Credit: | Discovery of this issue is credited to Stas Sergeev. |
| Vulnerable: |
Linux kernel 2.6.5 Linux kernel 2.6.4 Linux kernel 2.6.3 Linux kernel 2.6.2 Linux kernel 2.6.1 Linux kernel 2.6 |
| Not Vulnerable: | |
Discussion
Linux Kernel Local IO Access Inheritance Vulnerability
It has been reported that the Linux Kernel is affected by an IO access inheritance vulnerability. This issue is due to an access validation error that fails to invalidate all io_bitmap pointers before a process exits.
This issue could allow local users to lock up the affected system, denying service to legitimate users. This issue might also allow an attacker to gain escalated privileges.
It has been reported that the Linux Kernel is affected by an IO access inheritance vulnerability. This issue is due to an access validation error that fails to invalidate all io_bitmap pointers before a process exits.
This issue could allow local users to lock up the affected system, denying service to legitimate users. This issue might also allow an attacker to gain escalated privileges.
Exploit / POC
Linux Kernel Local IO Access Inheritance Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Linux Kernel Local IO Access Inheritance Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Linux Kernel Local IO Access Inheritance Vulnerability
References:
References:
- Bug in IO bitmap handling? Probably exploitable (2.6.5) (Stas Sergeev)
- kernel.org Homepage. (Linux Kernel)
- Re: Bug in IO bitmap handling? Probably exploitable (2.6.5) (Linus Torvalds)