REDHAT-BUG-691793: Double Free

Published Mar 29, 2011

Updated

Originally, the CVE-2010-4250 identifier has been assigned to the following vulnerability:

Memory leak in the inotifyinit() system call could, in some cases, leak a group, allowing a local, unprivileged user to eventually cause a denial of service.

References: [1] https://bugzilla.redhat.com/showbug.cgi?id=CVE-2010-4250

Later, it was found that relevant upstream commit: a2ae4cc9a16e211c8a128ba10d22a85431f093ab, v2.6.37-rc5

did not properly address the issue / introduced a regression (slab corruption by double free of userstruct in inotifyinit1), which could allow a local, unprivileged user to cause a denial of service (kernel crash).

Affected Software

1 affected component

Red Hat Linux Kernel>=2.6.37-rc5

Event History

Mar 29, 2011

Data Sourced

via Red Hat·01:49 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-691793?

REDHAT-BUG-691793 is considered a medium severity vulnerability due to its potential for memory leak exploitation leading to denial of service.

How do I fix REDHAT-BUG-691793?

To fix REDHAT-BUG-691793, update the Red Hat Linux Kernel to a version that has addressed the memory leak issue.

Who is affected by REDHAT-BUG-691793?

Systems running Red Hat Linux Kernel versions 2.6.37-rc5 and later are affected by the REDHAT-BUG-691793 vulnerability.

What are the potential impacts of REDHAT-BUG-691793?

The potential impacts of REDHAT-BUG-691793 include resource exhaustion and possible denial of service conditions for unprivileged users.

Is there a workaround for REDHAT-BUG-691793?

Currently, there are no effective workarounds for REDHAT-BUG-691793, and upgrading the kernel is the recommended solution.