Candidate: CVE-2008-1375 Description: dnotify race References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=214b7049a7929f03bbd2786aaef04b8b79db34e2 Ubuntu-Description: A race condition was discovered between dnotify fcntl() and close() in the kernel. If a local attacker performed malicious dnotify requests, they could cause memory consumption leading to a denial of service, or possibly send arbitrary signals to any process. Notes: kees> ABI changer due to header addition? kees> http://svn.debian.org/wsvn/kernel/dists/etch-security/linux-2.6/debian/patches/bugfix/dnotify-race-avoid-abi-change.patch?op=file&rev=0&sc=0 Bugs: upstream: released (2.6.26-rc1) linux-2.6: released (2.6.25-2) 2.6.18-etch-security: released (2.6.18.dfsg.1-18etch2) [bugfix/dnotify-race.patch] 2.6.24-etch-security: released (2.6.24-6~etchnhalf.2) [bugfix/all/stable/2.6.24.6.patch] 2.6.15-dapper-security: released (2.6.15-52.67) 2.6.17-edgy-security: ignored (EOL) 2.6.20-feisty-security: released (2.6.20-17.36) 2.6.22-gutsy-security: released (2.6.22-15.54) 2.6.24-hardy-security: released (2.6.24-19.34)