REDHAT-BUG-315051: High severity red hat linux vulnerability
Due issue described in https://bugzilla.redhat.com/showbug.cgi?id=313681
open(OATOMICLOOKUP) leaks the dentry on the filesystems where drevalidate is implemented. i.e open ("/proc/self/exe", ORDONLY); open ("/proc/self/exe", ORDONLY | 02000000);
leaks one dentry.
By this way it's possible to eat all the memory on the node or overflow dentry->dcount.
Both RHEL4 and RHEL5 kernels are vulnerabled
Acknowledgements:
Red Hat would like to credit Vasily Averin for reporting this issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-315051?
The severity of REDHAT-BUG-315051 is classified as medium.
How do I fix REDHAT-BUG-315051?
Fixing REDHAT-BUG-315051 involves updating the Red Hat Linux Kernel to a version later than 5.
What versions of Red Hat Linux are affected by REDHAT-BUG-315051?
Red Hat Linux Kernel versions between 4 and 5 are affected by REDHAT-BUG-315051.
Is there a workaround for REDHAT-BUG-315051?
A temporary workaround for REDHAT-BUG-315051 may include disabling the use of O_ATOMICLOOKUP.
What type of issue is REDHAT-BUG-315051 classified as?
REDHAT-BUG-315051 is classified as an incompatibility issue between O_ATOMICLOOKUP and O_CLOEXEC.