The wait_task_stopped function in the Linux kernel before 2.6.23.8 checks a TASK_TRACED bit instead of an exit_state value, which allows local users to cause a denial of service (machine crash) via unspecified vectors. NOTE: some of these details are obtained from third party information.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Linux_kernel | Linux | * | 2.6.23.7 (including) |
Red Hat Enterprise Linux 4 | RedHat | kernel-0:2.6.9-67.0.4.EL | * |
Linux | Ubuntu | upstream | * |
Linux-source-2.6.15 | Ubuntu | dapper | * |
Linux-source-2.6.15 | Ubuntu | upstream | * |
Linux-source-2.6.17 | Ubuntu | edgy | * |
Linux-source-2.6.17 | Ubuntu | upstream | * |
Linux-source-2.6.20 | Ubuntu | feisty | * |
Linux-source-2.6.20 | Ubuntu | upstream | * |
Linux-source-2.6.22 | Ubuntu | gutsy | * |
Linux-source-2.6.22 | Ubuntu | upstream | * |