CVE - CVE-2009-1527

CVE-ID
CVE-2009-1527	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Race condition in the ptrace_attach function in kernel/ptrace.c in the Linux kernel before 2.6.30-rc4 allows local users to gain privileges via a PTRACE_ATTACH ptrace call during an exec system call that is launching a setuid application, related to locking an incorrect cred_exec_mutex object.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:34799 URL:http://www.securityfocus.com/bid/34799 BUGTRAQ:20090516 rPSA-2009-0084-1 kernel URL:http://www.securityfocus.com/archive/1/503610/100/0/threaded CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=cad81bc2529ab8c62b6fdc83a1c0c7f4a87209eb CONFIRM:http://wiki.rpath.com/Advisories:rPSA-2009-0084 CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.30-rc4 MLIST:[oss-security] 20090504 CVE request: kernel: ptrace_attach: fix the usage of ->cred_exec_mutex URL:http://www.openwall.com/lists/oss-security/2009/05/04/2 OSVDB:54188 URL:~~http://www.osvdb.org/54188~~ (Obsolete source) SECUNIA:34977 URL:http://secunia.com/advisories/34977 SECUNIA:35120 URL:http://secunia.com/advisories/35120 VUPEN:ADV-2009-1236 URL:~~http://www.vupen.com/english/advisories/2009/1236~~ (Obsolete source) XF:linux-kernel-ptraceattach-code-execution(50293) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/50293
Assigning CNA
MITRE Corporation
Date Record Created
20090505	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20090505)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)