The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mm_count counter when an error occurs after the mm_struct for a child process has been activated, which triggers a memory leak that allows local users to cause a denial of service (memory exhaustion) via the clone (CLONE_VM) system call.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade sys-kernel/mips-sources.Upgrade sys-kernel/hppa-sources.Upgrade sys-kernel/selinux-sources.Upgrade sys-kernel/rsbac-sources.Upgrade sys-kernel/planet-ccrma-sources.Upgrade sys-kernel/sparc-sources.Upgrade sys-kernel/compaq-sources.Upgrade sys-kernel/gentoo-sources.Upgrade sys-kernel/pegasos-dev-sources.Upgrade sys-kernel/ck-sources.Upgrade sys-kernel/xfs-sources.Upgrade sys-kernel/pac-sources.Upgrade sys-kernel/aa-sources.Upgrade sys-kernel/usermode-sources.Upgrade sys-kernel/vserver-sources.Upgrade sys-kernel/openmosix-sources.Upgrade sys-kernel/ppc-sources.Upgrade sys-kernel/gentoo-dev-sources.Upgrade sys-kernel/hardened-dev-sources.Upgrade sys-kernel/rsbac-dev-sources.Upgrade sys-kernel/hppa-dev-sources.Upgrade sys-kernel/wolk-sources.Upgrade sys-kernel/hardened-sources.Upgrade sys-kernel/grsec-sources.Upgrade sys-kernel/ppc64-sources.Upgrade sys-kernel/vanilla-sources.Upgrade sys-kernel/alpha-sources.Upgrade sys-kernel/ia64-sources.Upgrade sys-kernel/win4lin-sources.Upgrade sys-kernel/mm-sources.Upgrade sys-kernel/gaming-sources.Upgrade sys-kernel/uclinux-sources.Upgrade sys-kernel/pegasos-sources.Upgrade sys-kernel/development-sources.Upgrade sys-kernel/gs-sources.Upgrade sys-kernel/xbox-sources. | Oct 30, 2017 | Jul 7, 2004 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub