#VU95469 Race condition in Linux kernel - CVE-2005-3527

Vulnerability identifier: #VU95469

Vulnerability risk: Low

CVSSv4.0: 1.9 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2005-3527

CWE-ID: CWE-362

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

Race condition in do_coredump in signal.c in Linux kernel 2.6 allows local users to cause a denial of service by triggering a core dump in 1 thread while another thread has a pending SIGSTOP.

Mitigation
Install update from vendor's repository.

Vulnerable software versions

Linux kernel: All versions

---

External links
https://secunia.com/advisories/17917
https://secunia.com/advisories/17918
https://www.kernel.org/git/?p=linux/kernel/git/davem/sparc-2.6.git;a=commitdiff;h=788e05a67c343fa22f2ae1d3ca264e7f15c25eaf
https://www.mandriva.com/security/advisories?name=MDKSA-2006:018
https://www.securityfocus.com/advisories/9806
https://www.securityfocus.com/archive/1/419522/100/0/threaded
https://www.securityfocus.com/archive/1/427981/100/0/threaded
https://www.securityfocus.com/bid/15723

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.