DoS vulnerability in Linux Kernel wait_task_stopped

Linux Kernel wait_task_stopped has a denial of service vulnerability that affects the system:

Linux kernel

Unaffected system:

Linux kernel 2.6.23.8

Description:

Bugtraq id: 26477

CVE (CAN) ID: CVE-2007-5500

Linux Kernel is the Kernel used by the open-source operating system Linux.

A security vulnerability exists in the wait_task_stopped () function of Linux Kernel. Local attackers may exploit this vulnerability to make the server unavailable.

If the local user controls the sub-process status and the parent process is still waiting for the status change, that is, the parent process is in wait () or waitpid (), it will cause a denial of service.

Vendor patch:

The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.kernel.org/