CVE-2007-0771: Medium severity Linux Linux kernel vulnerability
Description of problem:
Testsuite case in frysk exercises the kernel with tracing a small executable (using strace), where the executable exec's a given command in a separate thread. When that non-main thread completed, a kernel bug is triggered.
Version-Release number of selected component (if applicable):
kernel 2.6.19-1.2895.fc6
How reproducible:
About 3 out of 5 attempts.
Steps to Reproduce: 1. Compile threadexec.c (attached) 2. Issue the command: strace -f -o /dev/null ./threadexec /bin/echo hi | grep hi 3. Repeat a few times if necessary Actual results:
Program execution will print 'hi' on a single line. Kernel BUG will be reported in kernel messages.
Expected results:
Program execution should print 'hi' on a single line.
Additional info:
The bugzilla report for frysk is:
http://sourceware.org/bugzilla/showbug.cgi?id=3820
A similar earlier problem existed that prompted this test case to be written. The original frysk bug was:
http://sourceware.org/bugzilla/showbug.cgi?id=2130
Other sources
The utrace support in Linux kernel 2.6.18, and other versions, allows local users to cause a denial of service (system hang) related to "MT exec + utraceattach spin failure mode," as demonstrated by ptrace-thrash.c.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0771?
CVE-2007-0771 has a medium severity rating as it can lead to a kernel crash.
How do I fix CVE-2007-0771?
To fix CVE-2007-0771, update your affected Linux kernel version to one that is beyond 2.6.20.
Which software versions are affected by CVE-2007-0771?
CVE-2007-0771 affects specific versions of the Linux kernel, including 2.6.18 up to 2.6.20.
Is CVE-2007-0771 related to threading issues?
Yes, CVE-2007-0771 is triggered when a non-main thread completes execution, leading to a kernel bug.
Are Red Hat Enterprise Linux users affected by CVE-2007-0771?
Yes, Red Hat Enterprise Linux 5.0 users are among those affected by CVE-2007-0771.