The Linux kernel before 2.4.36-rc1 has a race condition. It was possible to bypass systrace policies by flooding the ptraced process with SIGCONT signals, which can can wake up a PTRACED process.
References
Link | Resource |
---|---|
http://taviso.decsystem.org/research.html | Third Party Advisory |
https://osdn.net/projects/linux-kernel-docs/scm/git/linux-2.4.36/listCommit?skip=60 | Issue Tracking Third Party Advisory |
https://security.netapp.com/advisory/ntap-20200204-0002/ |
Configurations
Information
Published : 2020-01-15 09:15
Updated : 2020-02-04 04:15
NVD link : CVE-2007-4774
Mitre link : CVE-2007-4774
JSON object : View
CWE
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Products Affected
linux
- linux_kernel