The Linux Kernel imposes a size restriction on the arguments and environmental strings passed through RLIMIT_STACK/RLIMIT_INFINITY (1/4 of the size), but does not take the argument and environment pointers into account, which allows attackers to bypass this limitation.
This method in itself is not an exploit, but bypassing this mechanism is the flaw/issue being tracked.
Name: Qualys Inc.
Created kernel tracking bugs for this issue:
Affects: fedora-all [bug 1462827]
This issue affects the Linux kernel packages as shipped with Red Hat
Enterprise Linux 5,6, 7 and MRG-2.
Future Linux kernel updates for the respective releases may address this issue.
Any ETA for errata for this vulnerability. RHEL 5,6,7 are affected by this bug. No errata has been released, any possible ETA would help to pass on information to customer.
Looking back through my mail, I had lodged a dispute with mitre about this being an actual flaw, it was turned down
EL7 was fixed in commit 2ddf8223ea49e280967762dc2d954aea2d497c80 Which was fixed in kernel-3.10.0-1000.el7 or newer.
This low wouldn't qualify for a fix in el5 and 6. at this point (or then) either.