Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The kill_something_info function in kernel/signal.c in the Linux kernel before 2.6.28 does not consider PID namespaces when processing signals directed to PID -1, which allows local users to bypass the intended namespace isolation, and send arbitrary signals to all processes in all namespaces, via a kill command.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux Kernel '/signal.c'本地拒绝服务漏洞
Vulnerability Description
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。 Linux kernel的kernel/signal.c文件中的kill_something_info函数在处理发送给PID -1的信号时没有考虑PID命名空间,这允许本地用户绕过预期的命名空间隔离,通过kill命令向命名空间中的所有进程发送任意信号。
CVSS Information
N/A
Vulnerability Type
N/A