Description
Unspecified versions of the Linux kernel allow local users to cause a denial of service (unrecoverable zombie process) via a program with certain instructions that prevent init from properly reaping a child whose parent has died.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | kernel +12 | 2.6.18-53.1.14.el5 | RHSA-2008:0154 |
| RHEL 4 | kernel +10 | 2.6.9-55.0.12.EL | RHSA-2007:0939 |
Advisories 2
- RHSA-2008:0154 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2007:0939 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- oval:org.mitre.oval:def:10834 vdb-entry signature
- 27747 third-party-advisory
- RHSA-2008:0154 vendor-advisory
- [linux-kernel] 20061220 Re: BUG: wedged processes, test program supplied mailing-list
- RHSA-2007:0939 vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm
- [linux-kernel] 20061219 BUG: wedged processes, test program supplied mailing-list
- 29236 third-party-advisory
- 27436 third-party-advisory