NetSight
IP …
medium5.9

CVE-2009-2848

The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current->clear_child_tid pointer, which allows local user…

Impact

The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current->clear_child_tid pointer, which allows local users to cause a denial of service (memory corruption) or possibly gain privileges via a clone system call with CLONE_CHILD_SETTID or CLONE_CHILD_CLEARTID enabled, which is not properly handled during thread creation and exit.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 2.6.29.5
Version 2.6.30
NovellLinux Desktop
Version 9
OpensuseOpensuse
Version 11.0
SuseLinux Enterprise Desktop
Version 10
SuseLinux Enterprise Server
Versions 9, 10
FedoraprojectFedora
Version 11
CanonicalUbuntu Linux
Versions 6.06, 8.04, 8.10, 9.04
RedhatEnterprise Linux Desktop
Versions 3.0, 5.0
RedhatEnterprise Linux Server
Versions 3.0, 5.0
RedhatEnterprise Linux Workstation
Versions 3.0, 5.0
VmwareEsx
Version 4.0
VmwareVma
Version 4.0

Weakness classification

CWE-269

References