CVE-2010-0729: Medium severity redhat Enterprise Linux vulnerability
(Internal git) Commit c31d1f3f363a5c3b6dbd4d6daa36fa0f4273e948 "a64: fix deadlock in ia64 sysptrace" moved ptracecheckattach() from findthreadforaddr() to tasklist-is-not-held area. However it introduced other problems.
In the likely case, when rbschild == child, ptracecheckattach() is never called. Otherwise we do ptracecheckattach(rbschild) twice. This means that any peek/poke request can silently fail and fool the tracer.
With this patch the logic is ptracecheckattach(child);
if (rbschild != child) { // we should use rbschild ... if (!ptracecheckattach(rbschild)) child = rbschild;
// but if checkattach() fails we continue to // use child, we are doing as well as we can. }
To simplify the error-handling and the logic, this patch changes the code to detect the likely rbschild == child case earlier, right after findthreadforaddr().
This only affects Red Hat Enterprise Linux 4.
Other sources
A certain Red Hat patch for the Linux kernel in Red Hat Enterprise Linux (RHEL) 4 on the ia64 platform allows local users to use ptrace on an arbitrary process, and consequently gain privileges, via vectors related to a missing ptracecheckattach call.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0729?
CVE-2010-0729 is classified as a moderate severity vulnerability.
How do I fix CVE-2010-0729?
To fix CVE-2010-0729, you need to apply the latest patches and updates made available by Red Hat for Enterprise Linux 4.
What are the potential impacts of CVE-2010-0729?
The potential impacts of CVE-2010-0729 include denial of service and potential exposure to privilege escalation.
Which versions of Red Hat Enterprise Linux are affected by CVE-2010-0729?
CVE-2010-0729 specifically affects Red Hat Enterprise Linux version 4.
Does CVE-2010-0729 have associated public references or reports?
Yes, CVE-2010-0729 is associated with multiple public references, including security notices and bug reports.