Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The auto-reap of child processes in Linux kernel 2.6 before 2.6.15 includes processes with ptrace attached, which leads to a dangling ptrace reference and allows local users to cause a denial of service (crash) and gain root privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux Kernel auto-reap ptraced子进程本地拒绝服务漏洞
Vulnerability Description
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。 Linux Kernel对系统进程的处理上存在问题,本地攻击者可能利用此漏洞进行拒绝服务攻击。漏洞存在于signal.c文件中,内核对子进程执行auto-reap操作时,操作对象包含了已经被ptrace附着的进程,这可能导致ptrace引用混乱,允许本地攻击者触发拒绝服务问题。
CVSS Information
N/A
Vulnerability Type
N/A