The ftrace implementation in the Linux kernel before 3.8.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging the CAP_SYS_ADMIN capability for write access to the (1) set_ftrace_pid or (2) set_graph_function file, and then making an lseek system call.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Information
Published : 2013-04-29 07:55
Updated : 2023-02-12 20:44
NVD link : CVE-2013-3301
Mitre link : CVE-2013-3301
JSON object : View
CWE
Products Affected
redhat
- enterprise_linux
- enterprise_mrg
linux
- linux_kernel