The shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other processes, which could cause sensitive memory to be swapped to disk, which could allow it to be read by other users once it has been released.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Linux_kernel | Linux | 2.6.9-2.6.20 (including) | 2.6.9-2.6.20 (including) |
| Red Hat Enterprise Linux 3 | RedHat | kernel-0:2.4.21-32.0.1.EL | * |
| Red Hat Enterprise Linux 4 | RedHat | kernel-0:2.6.9-5.0.3.EL | * |
References
- ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U
- http://distro.conectiva.com.br/atualizacoes/index.php?id=a\u0026anuncio=000930
- http://marc.info/?l=full-disclosure\u0026m=110846102231365\u0026w=2
- http://secunia.com/advisories/19607
- http://www.redhat.com/support/errata/RHSA-2005-092.html
- http://www.redhat.com/support/errata/RHSA-2005-472.html
- http://www.securityfocus.com/bid/12598
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1225
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8778
- ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U
- http://distro.conectiva.com.br/atualizacoes/index.php?id=a\u0026anuncio=000930
- http://marc.info/?l=full-disclosure\u0026m=110846102231365\u0026w=2
- http://secunia.com/advisories/19607
- http://www.redhat.com/support/errata/RHSA-2005-092.html
- http://www.redhat.com/support/errata/RHSA-2005-472.html
- http://www.securityfocus.com/bid/12598
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1225
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8778