REDHAT-BUG-715436
First published: Wed Jun 22 2011(Updated: )
Currently a single process may register exit handlers unlimited times. It may lead to a bloated listeners chain and very slow process terminations. E.g. after 10KK sent TASKSTATS_CMD_ATTR_REGISTER_CPUMASKs ~300 Mb of kernel memory is stolen for the handlers chain and "time id" shows 2-7 seconds instead of normal 0.003. It makes it possible to exhaust all kernel memory and to eat much of CPU time by triggerring numerous exits on a single CPU ie it makes it possible for unprivileged user eat kernel memory and CPU without triggering OOM killer. Introduced in f9fd8914c1acca0d98b69d831b128d5b52f03c51. References: <a href="http://seclists.org/oss-sec/2011/q2/664">http://seclists.org/oss-sec/2011/q2/664</a> <a href="http://lists.openwall.net/linux-kernel/2011/06/16/605">http://lists.openwall.net/linux-kernel/2011/06/16/605</a> Acknowledgements: Red Hat would like to thank Vasiliy Kulikov of Openwall for reporting this issue.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat Linux | >=f9fd8914c1acca0d98b69d831b128d5b52f03c51 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://seclists.org/oss-sec/2011/q2/664
- http://lists.openwall.net/linux-kernel/2011/06/16/605
- http://git.kernel.org/linus/26c4caea9d697043cc5a458b96411b86d7f6babd
- https://rhn.redhat.com/errata/RHSA-2011-1386.html
- https://rhn.redhat.com/errata/RHSA-2011-1350.html
- https://rhn.redhat.com/errata/RHSA-2011-1253.html
- https://bugzilla.redhat.com/show_bug.cgi?id=715436
Frequently Asked Questions
What is the severity of REDHAT-BUG-715436?
REDHAT-BUG-715436 is a medium severity issue due to potential performance degradation in process terminations.
How do I fix REDHAT-BUG-715436?
To fix REDHAT-BUG-715436, update to a patched version of the Red Hat Linux Kernel that addresses this bug.
What software is affected by REDHAT-BUG-715436?
The affected software for REDHAT-BUG-715436 includes Red Hat Linux Kernel versions prior to the fixed release.
What are the symptoms of REDHAT-BUG-715436?
Symptoms of REDHAT-BUG-715436 include slow process terminations and excessive kernel memory usage due to bloated exit handlers.
What causes REDHAT-BUG-715436?
REDHAT-BUG-715436 is caused by a single process registering exit handlers an unlimited number of times.
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2011-2484
- agent/severity
- agent/references
- agent/description
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/red hat
- canonical/red hat linux