Design/Logic Flaw

🗓️ 20 Apr 2010 15:30:00Reported by PRIOn knowledge baseType

prion

prion🔗 www.prio-n.com👁 19 Views

The release_one_tty function in Linux kernel omits required put_pid calls, leading to local attack vector

Reporter	Title	Published	Views	Family All 157
BDU FSTEC	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	6 Jul 201600:00	–	bdu_fstec

Source	Link
openwall	www.openwall.com/lists/oss-security/2010/04/16/1
openwall	www.openwall.com/lists/oss-security/2010/04/15/2
kernel	www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.34-rc4
openwall	www.openwall.com/lists/oss-security/2010/04/14/1
openwall	www.openwall.com/lists/oss-security/2010/04/15/1
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
secunia	www.secunia.com/advisories/39830
debian	www.debian.org/security/2010/dsa-2053
vupen	www.vupen.com/english/advisories/2010/1857
lists	www.lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html

13 Feb 2023 04:17Current

6.6Medium risk

Vulners AI Score6.6

EPSS0.00406

linux kernel release_one_tty function put_pid calls local attack vectors drivers/char/tty_io.c logic flaw nvd