Linux Kernel trusted datagram socket (RDS) protocol local Integer Overflow Vulnerability

Release date: 2011-10-14
Updated on: 2011-10-14

Affected Systems:
Linux kernel 2.6.x
RedHat Enterprise Linux
Ubuntu 9.x
Ubuntu 10.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 44549
Cve id: CVE-2010-3865

Linux Kernel is the linux Kernel, which is based on the linux platform and compiled in C language, based on this kernel, specific operating systems such as Red Hat linux and open SUSE linux are derived. A complete Operating System Based on Linux kernel is called Linux or GNU/linux.

Linux Kernel has a security vulnerability in the implementation of the RDS protocol. Local attackers can exploit this vulnerability to execute arbitrary code with higher permissions, causing the affected Kernel to crash. Red Hat Enterprise Linux 3, 4, and Red Hat Enterprise MRG do not support the RDS protocol, so they are not affected.

<* Source: Thomas Pollet

Link: https://bugzilla.redhat.com/show_bug.cgi? Id = 647416
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Linux
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.kernel.org/