Title: Linux Kernel run_posix_cpu_timers Process Timer Local DoS
Info
Disclosure
Jun 15, 2006
Discovery
Unknown
Dates
Exploit
Unknown
Solution
Unknown
Description
The Linux kernel contains a flaw that may allow a local denial of service. The issue is triggered because a CPU could attach a timer to a currently exiting process, which will result in a kernel 'oops' and therefore in loss of availability for the platform.
Classification
Location:
Local Access Required
Attack Type:
Denial of Service,
Race Condition
Impact:
Loss of Availability
Exploit:
Exploit Rumored
Disclosure:
OSVDB Verified,
Vendor Verified
Solution
Upgrade to version 2.6.16.21 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.