Linux Kernel "pipe_fcntl()" Local Denial of Service

  Bookmark
 and Share

The Linux kernel is exposed to a local denial of service issue because it fails to check the file type before operating on it. The problem occurs in the "pipe_fcntl()" function of the "fs/pipe.c" source file and is triggered when the function operates on a file which is not a pipe. Linux kernel version 2.6.35-rc1 is affected.

Ref: http://comments.gmane.org/gmane.comp.security.oss.general/3863

10.50.11 - CVE: CVE-2010-4256
Platform: Linux