Release date:
Updated on: 2012-09-04
Affected Systems:
Linux kernel 2.6.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 48383
Cve id: CVE-2011-2484
Linux Kernel is the Kernel of the Linux operating system.
The add_del_listener function of Linux Kernel 2.6.39.1 and earlier versions of kernel/taskstats. c does not prevent multiple registrations from exiting the handler. through special applications, local users can be allowed to cause denial of service and bypass OOM limiters.
<* Source: Vasiliy Kulikov (segoon@openwall.com)
Link: http://downloads.avaya.com/css/P8/documents/100150522
Http://lists.openwall.net/linux-kernel/2011/06/16/605
Http://downloads.avaya.com/css/P8/documents/100152852
*>
Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
Linux
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
Http://www.kernel.org/