CVE-2011-1182

Published: 20 April 2011

kernel/signal.c in the Linux kernel before 2.6.39 allows local users to spoof the uid and pid of a signal sender via a sigqueueinfo system call.

From the Ubuntu security team

Julien Tinnes discovered that the kernel did not correctly validate the signal structure from tkill(). A local attacker could exploit this to send signals to arbitrary threads, possibly bypassing expected restrictions.

Priority

Status

Package	Release	Status
linux Launchpad, Ubuntu, Debian	Upstream	Released (2.6.39~rc1)






	Patches: Upstream: http://git.kernel.org/linus/da48524eb20662618854bb3df2db01fc65f3070c Upstream: http://git.kernel.org/linus/243b422af9ea9af4ead07a8ad54c90d4f9b6081a
linux-ec2 Launchpad, Ubuntu, Debian	Upstream	Released (2.6.39~rc1)






linux-fsl-imx51 Launchpad, Ubuntu, Debian	Upstream	Released (2.6.39~rc1)






linux-lts-backport-maverick Launchpad, Ubuntu, Debian	Upstream	Released (2.6.39~rc1)






linux-lts-backport-natty Launchpad, Ubuntu, Debian	Upstream	Released (2.6.39~rc1)






linux-mvl-dove Launchpad, Ubuntu, Debian	Upstream	Released (2.6.39~rc1)






linux-source-2.6.15 Launchpad, Ubuntu, Debian	Upstream	Released (2.6.39~rc1)






linux-ti-omap4 Launchpad, Ubuntu, Debian	Upstream	Released (2.6.39~rc1)

References

Join the discussion

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu 14.04 Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM