SB2005050214 - Race condition in Linux kernel



SB2005050214 - Race condition in Linux kernel

Published: May 2, 2005

Security Bulletin ID SB2005050214
Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Code execution

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Race condition (CVE-ID: CVE-2005-0001)

The vulnerability allows a local user to execute arbitrary code.

Race condition in the page fault handler (fault.c) for Linux kernel 2.2.x to 2.2.7, 2.4 to 2.4.29, and 2.6 to 2.6.10, when running on multiprocessor machines, allows local users to execute arbitrary code via concurrent threads that share the same virtual memory space and simultaneously request stack expansion.


Remediation

Install update from vendor's website.