Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAP_KILL capability is held, which allows local users to send an arbitrary signal to a process by running a program that modifies the exit_signal field and then uses an exec system call to launch a setuid application.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux Kernel '/exit.c'验证本地权限提升漏洞
Vulnerability Description
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。 Linux Kernel的kernel/exit.c文件中的exit_notify()函数没有正确地检查CAP_KILL功能，如果本地用户在退出前执行了setuid应用程序就会导致没有将信号重置为SIGCHLD，绕过其他检查获得权限提升。
CVSS Information
N/A
Vulnerability Type
N/A