Red Hat Bugzilla – Bug 115818
CAN-2004-0077 Linux kernel do_mremap VMA limit local privilege escalation
Last modified: 2007-11-30 17:06:53 EST
Paul Starzetz discovered a flaw in return value checking in mremap()
in the Linux kernel versions 2.4.24 and previous that may allow a
local attacker to gain root privileges. No exploit is currently
available; however this issue is exploitable.
Affected: 2.1AS 2.1ES 2.1WS
Embargoed until Feb18
An errata has been issued which should help the problem described in this bug report.
This report is therefore being closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files, please follow the link below. You may reopen
this bug report if the solution does not work for you.