imPC@ndo IT

Tracker / CVE-2011-1182

CVE-2011-1182

Low 3.6

kernel/signal.c in the Linux kernel before 2.6.39 allows local users to spoof the uid and pid of a signal sender via a sigqueueinfo system call.

Affected products and versions

linux linux_kernel · … → 2.6.39
redhat enterprise_linux
redhat enterprise_linux_aus
redhat enterprise_linux_desktop
redhat enterprise_linux_eus
redhat enterprise_linux_server
redhat enterprise_linux_workstation

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References