Beveiligingsadvies

CVE-2009-1527

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2009-05-05 20:00:00
Laatst bijgewerkt 2024-08-07 05:13:25
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Race condition in the ptrace_attach function in kernel/ptrace.c in the Linux kernel before 2.6.30-rc4 allows local users to gain privileges via a PTRACE_ATTACH ptrace call during an exec system call that is launching a setuid application, related to locking an incorrect cred_exec_mutex object.