Re: CVE Request -- kernel: taskstats: use-after-free in xacct_add_tsk()

[akuster <akuster () mvista com>]

Petr,

If I am not mistaken, this was introduced via
9acc1853519a0473620d424105f9d49ea5b4e62e and only if TASK_XACCT is enabled.

is that correct?

regards,
Armin


On 08/20/2012 10:25 AM, Petr Matousek wrote:
> An use-after-free flaw has been found in the way taskstat's
> TASKSTATS_CMD_ATTR_PID command and exiting tasks with already freed mm
> interacted. An unprivileged local user could use this flaw to crash the
> system or leak kernel memory.
>
> Please note that the fix below is from year 2006.
>
> Upstream fix:
> http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=f0ec1aaf54caddd21c259aea8b2ecfbde4ee4fb9
>
> References:
> http://bugzilla.openvz.org/show_bug.cgi?id=2294
> https://bugzilla.redhat.com/show_bug.cgi?id=849722
>
> Thanks,