From 8b89b4be7cf2cf2a85f2e5521046e5a53d6a90dc Mon Sep 17 00:00:00 2001 From: Moritz Muehlenhoff Date: Thu, 4 Mar 2010 23:30:06 +0000 Subject: retire issues git-svn-id: svn+ssh://svn.debian.org/svn/kernel-sec@1759 e094ebfe-e918-0410-adfb-c712417f3574 --- retired/CVE-2009-2691 | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 retired/CVE-2009-2691 (limited to 'retired/CVE-2009-2691') diff --git a/retired/CVE-2009-2691 b/retired/CVE-2009-2691 new file mode 100644 index 00000000..6069194d --- /dev/null +++ b/retired/CVE-2009-2691 @@ -0,0 +1,14 @@ +Candidate: CVE-2009-2691 +Description: + The mm_for_maps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier + allows local users to read (1) maps and (2) smaps files under proc/ via vectors + related to ELF loading, a setuid process, and a race condition. +References: +Ubuntu-Description: +Notes: +Bugs: +upstream: released (2.6.31-rc6) [13f0fea, 00f89d2, 704b836], released (2.6.30.5) [95d7e670e3158b6a52a8279290a0d6f7047250b4, 17dc3e97d6d51df33cb6e35fabb62b91ef14cf2c, c6d59cb0341e2c3aed3eb65cbf166a686c3443aa] +linux-2.6: released (2.6.30-7) +2.6.18-etch-security: ignored (end of life) +2.6.24-etch-security: released (2.6.24-6~etchnhalf.9etch3) [bugfix/all/maps-visible-during-initial-setuid-ELF-loading.patch] +2.6.26-lenny-security: released (2.6.26-21) [bugfix/all/maps-visible-during-initial-setuid-ELF-loading.patch] -- cgit v1.2.3