Red Hat Bugzilla – Bug 1462147
CVE-2017-1000365 kernel: RLIMIT_STACK/RLIMIT_INFINITY string size limitation bypass
Last modified: 2017-09-14 13:27:18 EDT
The Linux Kernel imposes a size restriction on the arguments and environmental strings passed through RLIMIT_STACK/RLIMIT_INFINITY (1/4 of the size), but does not take the argument and environment pointers into account, which allows attackers to bypass this limitation.
This method in itself is not an exploit, but bypassing this mechanism is the flaw/issue being tracked.
Name: Qualys Inc.
Created kernel tracking bugs for this issue:
Affects: fedora-all [bug 1462827]
This issue affects the Linux kernel packages as shipped with Red Hat
Enterprise Linux 5,6, 7 and MRG-2.
Future Linux kernel updates for the respective releases may address this issue.
Any ETA for errata for this vulnerability. RHEL 5,6,7 are affected by this bug. No errata has been released, any possible ETA would help to pass on information to customer.