Vulnerability in Linux Kernel
CVE-2011-2484
The add_del_listener function in kernel/taskstats.c in the Linux kernel 2.6.39.1 and earlier does not prevent multiple registrations of exit handlers, which allows local users to cause a denial of service (memory and CPU consumption), and bypass the OOM Killer, via a crafted application.
EPSS: 0.004 (31.5th percentile) — read the EPSS interpretation.
Affected products
- Linux Linux_kernel
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- secalert@redhat.com (mailing-list, x_refsource_MLIST, Patch, Mailing List)
- secalert@redhat.com (x_refsource_MISC, Issue Tracking)
- secalert@redhat.com (mailing-list, x_refsource_MLIST, Patch)
- secalert@redhat.com (VDB Entry, vdb-entry, x_refsource_XF)
- secalert@redhat.com (mailing-list, x_refsource_MLIST, Patch, Mailing List)