Linux Kernel Concurrent Threaded Function Calls Local Denial of Service Vulnerability
BID:9148
Info
Linux Kernel Concurrent Threaded Function Calls Local Denial of Service Vulnerability
| Bugtraq ID: | 9148 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 02 2003 12:00AM |
| Updated: | Dec 02 2003 12:00AM |
| Credit: | This issue was announced in a Fedora Linux advisory. |
| Vulnerable: |
Linux kernel 2.4.22 Linux kernel 2.4.21 Linux kernel 2.4.20 Linux kernel 2.4.19 Linux kernel 2.4.18 Linux kernel 2.4.17 Linux kernel 2.4.16 Linux kernel 2.4.15 Linux kernel 2.4.14 Linux kernel 2.4.13 Linux kernel 2.4.12 Linux kernel 2.4.11 Linux kernel 2.4.10 Linux kernel 2.4.9 Linux kernel 2.4.8 Linux kernel 2.4.7 Linux kernel 2.4.6 Linux kernel 2.4.5 Linux kernel 2.4.4 Linux kernel 2.4.3 Linux kernel 2.4.2 Linux kernel 2.4.1 Linux kernel 2.4 |
| Not Vulnerable: | |
Discussion
Linux Kernel Concurrent Threaded Function Calls Local Denial of Service Vulnerability
A local denial of service vulnerability has been discovered in the Linux kernel, the issue is triggered when specific events occur concurrently. The precise technical details regarding this issue are currently unknown, however it has been reported that a fork() procedure carried out concurrently with a threaded exit() call, may cause the kernel to panic.
A local denial of service vulnerability has been discovered in the Linux kernel, the issue is triggered when specific events occur concurrently. The precise technical details regarding this issue are currently unknown, however it has been reported that a fork() procedure carried out concurrently with a threaded exit() call, may cause the kernel to panic.
Exploit / POC
Linux Kernel Concurrent Threaded Function Calls Local Denial of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Linux Kernel Concurrent Threaded Function Calls Local Denial of Service Vulnerability
Solution:
It should be noted that Fedora Linux has stated that their Core 1 release shipped with the vulnerable kernel. Therefore, it is currently believed that this issue was present in the 2.4.22 and although it has not yet been confirmed, it is speculated that the issue has been addressed in 2.4.23. As a safety precaution, it is recommended that all users upgrade to the latest kernel release possible.
Fedora Linux has released a security advisory containing fixes to address this issue. Users are advised to see the referenced advisory for further details on how to obtain and apply fixes.
Linux kernel 2.4.22
Solution:
It should be noted that Fedora Linux has stated that their Core 1 release shipped with the vulnerable kernel. Therefore, it is currently believed that this issue was present in the 2.4.22 and although it has not yet been confirmed, it is speculated that the issue has been addressed in 2.4.23. As a safety precaution, it is recommended that all users upgrade to the latest kernel release possible.
Fedora Linux has released a security advisory containing fixes to address this issue. Users are advised to see the referenced advisory for further details on how to obtain and apply fixes.
Linux kernel 2.4.22
-
Fedora kernel-2.4.22-1.2129.nptl.i586.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386 /kernel-2.4.22-1.2129.nptl.i586.rpm -
Fedora kernel-2.4.22-1.2129.nptl.i686.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386 /kernel-2.4.22-1.2129.nptl.i686.rpm -
Fedora kernel-BOOT-2.4.22-1.2129.nptl.i386.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386 /kernel-BOOT-2.4.22-1.2129.nptl.i386.rpm -
Fedora kernel-debuginfo-2.4.22-1.2129.nptl.athlon.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386 /debug/kernel-debuginfo-2.4.22-1.2129.nptl.athlon.rpm -
Fedora kernel-debuginfo-2.4.22-1.2129.nptl.i386.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386 /debug/kernel-debuginfo-2.4.22-1.2129.nptl.i386.rpm -
Fedora kernel-debuginfo-2.4.22-1.2129.nptl.i586.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386 /debug/kernel-debuginfo-2.4.22-1.2129.nptl.i586.rpm -
Fedora kernel-debuginfo-2.4.22-1.2129.nptl.i686.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386 /debug/kernel-debuginfo-2.4.22-1.2129.nptl.i686.rpm -
Fedora kernel-doc-2.4.22-1.2129.nptl.i386.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386 /kernel-doc-2.4.22-1.2129.nptl.i386.rpm -
Fedora kernel-smp-2.4.22-1.2129.nptl.athlon.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386 /kernel-smp-2.4.22-1.2129.nptl.athlon.rpm -
Fedora kernel-smp-2.4.22-1.2129.nptl.i686.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386 /kernel-smp-2.4.22-1.2129.nptl.i686.rpm -
Fedora kernel-source-2.4.22-1.2129.nptl.i386.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386 /kernel-source-2.4.22-1.2129.nptl.i386.rpm
References
Linux Kernel Concurrent Threaded Function Calls Local Denial of Service Vulnerability
References:
References: