Description
The Linux kernel 2.6 before 2.6.12.1 allows local users to cause a denial of service (kernel panic) via a non group-leader thread executing a different program than was pending in itimer, which causes the signal to be delivered to the old group-leader task, which does not exist.
References
- http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.1
- 15786 third-party-advisory
- USN-178-1 vendor-advisory
- kernel-subthread-dos(21138) vdb-entry
- 14054 vdb-entry