REDHAT-BUG-691793: Double Free
First published: Tue Mar 29 2011(Updated: )
Originally, the <a href="https://access.redhat.com/security/cve/CVE-2010-4250">CVE-2010-4250</a> identifier has been assigned to the following vulnerability: Memory leak in the inotify_init() system call could, in some cases, leak a group, allowing a local, unprivileged user to eventually cause a denial of service. References: [1] <a href="https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4250">https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4250</a> Later, it was found that relevant upstream commit: a2ae4cc9a16e211c8a128ba10d22a85431f093ab, v2.6.37-rc5 did not properly address the issue / introduced a regression (slab corruption by double free of user_struct in inotify_init1), which could allow a local, unprivileged user to cause a denial of service (kernel crash).
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat Linux | >=2.6.37-rc5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/security/cve/CVE-2010-4250
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4250
- http://git.kernel.org/linus/d0de4dc584ec6aa3b26fffea320a8457827768fc
- https://rhn.redhat.com/errata/RHSA-2011-0498.html
- https://rhn.redhat.com/errata/RHSA-2011-1253.html
- https://bugzilla.redhat.com/show_bug.cgi?id=691793
Frequently Asked Questions
What is the severity of REDHAT-BUG-691793?
REDHAT-BUG-691793 is considered a medium severity vulnerability due to its potential for memory leak exploitation leading to denial of service.
How do I fix REDHAT-BUG-691793?
To fix REDHAT-BUG-691793, update the Red Hat Linux Kernel to a version that has addressed the memory leak issue.
Who is affected by REDHAT-BUG-691793?
Systems running Red Hat Linux Kernel versions 2.6.37-rc5 and later are affected by the REDHAT-BUG-691793 vulnerability.
What are the potential impacts of REDHAT-BUG-691793?
The potential impacts of REDHAT-BUG-691793 include resource exhaustion and possible denial of service conditions for unprivileged users.
Is there a workaround for REDHAT-BUG-691793?
Currently, there are no effective workarounds for REDHAT-BUG-691793, and upgrading the kernel is the recommended solution.
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2011-1479
- agent/source
- agent/weakness
- agent/severity
- agent/description
- agent/event
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/red hat
- canonical/red hat linux