medium5.9
CVE-2007-4774
The Linux kernel before 2.4.36-rc1 has a race condition.
Impact
The Linux kernel before 2.4.36-rc1 has a race condition. It was possible to bypass systrace policies by flooding the ptraced process with SIGCONT signals, which can can wake up a PTRACED process.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | through 2.4.35 |
Weakness classification
References
- NVD record
- CVE.org record
- http://taviso.decsystem.org/research.html
- https://osdn.net/projects/linux-kernel-docs/scm/git/linux-2.4.36/listCommit?skip=60
- https://security.netapp.com/advisory/ntap-20200204-0002/
- http://taviso.decsystem.org/research.html
- https://osdn.net/projects/linux-kernel-docs/scm/git/linux-2.4.36/listCommit?skip=60
- https://security.netapp.com/advisory/ntap-20200204-0002/