Description
Race condition in run_posix_cpu_timers in Linux kernel before 2.6.16.21 allows local users to cause a denial of service (BUG_ON crash) by causing one CPU to attach a timer to a process that is exiting.
References
- 20703 third-party-advisory
- ADV-2006-2451 vdb-entry
- SUSE-SA:2006:042 vendor-advisory
- 20060623 rPSA-2006-0110-1 kernel mailing-list
- 26947 vdb-entry
- linux-runposixcputimers-dos(27380) vdb-entry
- MDKSA-2006:123 vendor-advisory
- MDKSA-2006:151 vendor-advisory
- [linux-kernel] 20060613 [RFC][PATCH] Avoid race w/ posix-cpu-timer and exiting tasks mailing-list
- 2006-0037 vendor-advisory
- USN-311-1 vendor-advisory
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.21
- 18615 vdb-entry
- http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=30f1e3dd8c72abda343bcf415f7d8894a02b4290
- 20831 third-party-advisory
- 21045 third-party-advisory
- 20991 third-party-advisory
- 21179 third-party-advisory