| Weekly edition | Kernel | Security | Distributions | Search |
| Archives | Calendar | Subscribe | Write for LWN | LWN.net FAQ |
kernel: information leak, denial of service
| Package(s): | linux-2.6 | CVE #(s): | CVE-2007-6206 CVE-2007-6417 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Created: | December 21, 2007 | Updated: | July 8, 2008 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Description: | Blake Frantz discovered that when a core file owned by a non-root user exists, and a root-owned process dumps core over it, the core file retains its original ownership. This could be used by a local user to gain access to sensitive information. (CVE-2007-6206)
Hugh Dickins discovered an issue in the tmpfs filesystem where, under a rare circumstance, a kernel page maybe improperly cleared, leaking sensitive kernel memory to userspace or resulting in a DoS (crash). (CVE-2007-6417) | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||
(Log in to post comments)