First published: Fri Oct 23 2009(Updated: )
Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer dereference and system crash) or gain privileges by attempting to open an anonymous pipe via a /proc/*/fd/ pathname.
Credit: secalert@redhat.com secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
Linux Linux kernel | <=2.6.31.14 | |
Linux Linux kernel | =2.6.32 | |
Linux Linux kernel | =2.6.32-rc1 | |
Linux Linux kernel | =2.6.32-rc2 | |
Linux Linux kernel | =2.6.32-rc3 | |
Linux Linux kernel | =2.6.32-rc4 | |
Linux Linux kernel | =2.6.32-rc5 | |
Novell Linux Desktop | =9 | |
openSUSE openSUSE | =11.0 | |
openSUSE openSUSE | =11.2 | |
SUSE SUSE Linux Enterprise Desktop | =10-sp2 | |
SUSE SUSE Linux Enterprise Server | =10-sp2 | |
Canonical Ubuntu Linux | =6.06 | |
Canonical Ubuntu Linux | =8.04 | |
Canonical Ubuntu Linux | =8.10 | |
Canonical Ubuntu Linux | =9.04 | |
Canonical Ubuntu Linux | =9.10 | |
Fedoraproject Fedora | =10 | |
VMware vMA | =4.0 | |
VMware ESX | =4.0 | |
Redhat Mrg Realtime | =1.0 | |
Redhat Enterprise Linux Desktop | =3.0 | |
Redhat Enterprise Linux Desktop | =4.0 | |
Redhat Enterprise Linux Desktop | =5.0 | |
Redhat Enterprise Linux Eus | =4.8 | |
Redhat Enterprise Linux Eus | =5.4 | |
Redhat Enterprise Linux Server | =3.0 | |
Redhat Enterprise Linux Server | =4.0 | |
Redhat Enterprise Linux Server | =5.0 | |
Redhat Enterprise Linux Workstation | =3.0 | |
Redhat Enterprise Linux Workstation | =4.0 | |
Redhat Enterprise Linux Workstation | =5.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.