CVE-2010-3079 (linux_enterprise_desktop, linux_enterprise_high_availability_extension, linux_enterprise_server, linux_kernel, ubuntu_linux)

kernel/trace/ftrace.c in the Linux kernel before 2.6.35.5, when debugfs is enabled, does not properly handle interaction between mutex possession and llseek operations, which allows local users to cause a denial of service (NULL pointer dereference and outage of all function tracing files) via an lseek call on a file descriptor associated with the set_ftrace_filter file.

View Full Alert

Leave a Reply