Race condition in Linux kernel - CVE-2004-1058

Vulnerability identifier: #VU95475

CSH Severity: Low

CVSS v4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2004-1058

CWE-ID: CWE-362

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to gain access to sensitive information.

Race condition in Linux kernel 2.6 allows local users to read the environment variables of another process that is still spawning via /proc/.../cmdline.

Linux kernel
Gentoo Linux
sys-kernel/alpha-sources
sys-kernel/ia64-sources
sys-kernel/hppa-sources
sys-kernel/vserver-sources
sys-kernel/hardened-sources
sys-kernel/pac-sources
sys-kernel/mm-sources
sys-kernel/gentoo-sources
sys-kernel/rsbac-dev-sources
sys-kernel/pegasos-dev-sources
sys-kernel/hardened-dev-sources
sys-kernel/grsec-sources
sys-kernel/aa-sources
sys-kernel/rsbac-sources
sys-kernel/hppa-dev-sources
sys-kernel/usermode-sources
sys-kernel/ck-sources
sys-kernel/openmosix-sources
sys-kernel/selinux-sources
sys-kernel/uclinux-sources
sys-kernel/gs-sources
sys-kernel/gentoo-dev-sources
sys-kernel/mips-sources
sys-kernel/development-sources
sys-kernel/sparc-sources

Install update from vendor's repository.

sys-kernel/alpha-sources - update to 2.4.21-r12
sys-kernel/ia64-sources - update to 2.4.23-r12
sys-kernel/hppa-sources - update to 2.4.24-r4
sys-kernel/vserver-sources - update to 2.4.24-r8
sys-kernel/hardened-sources - update to 2.4.24-r10
sys-kernel/pac-sources - update to 2.4.26-r3
sys-kernel/mm-sources - update to 2.4.26-r5
sys-kernel/gentoo-sources - update to 2.4.26-r9
sys-kernel/rsbac-dev-sources - update to 2.4.27
sys-kernel/pegasos-dev-sources - update to 2.4.27-r1
sys-kernel/hardened-dev-sources - update to 2.4.27-r1
sys-kernel/grsec-sources - update to 2.4.27.2.0.1-r1
sys-kernel/aa-sources - update to 2.6.5-r5
sys-kernel/rsbac-sources - update to 2.6.6-r6
sys-kernel/hppa-dev-sources - update to 2.6.6-r8
sys-kernel/usermode-sources - update to 2.6.7-r1
sys-kernel/ck-sources - update to 2.6.7-r5
sys-kernel/openmosix-sources - update to 2.6.7-r5
sys-kernel/selinux-sources - update to 2.6.7-r5
sys-kernel/uclinux-sources - update to 2.6.7-r5
sys-kernel/gs-sources - update to 2.6.7-r7
sys-kernel/gentoo-dev-sources - update to 2.6.7-r12
sys-kernel/mips-sources - update to 2.6.8
sys-kernel/development-sources - update to 2.6.8
sys-kernel/sparc-sources - update to 4.14-r7

• ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U
• http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html
• http://secunia.com/advisories/18684
• http://secunia.com/advisories/19038
• http://secunia.com/advisories/19369
• http://secunia.com/advisories/19607
• http://secunia.com/advisories/21476
• http://www.debian.org/security/2006/dsa-1018
• http://www.gentoo.org/security/en/glsa/glsa-200408-24.xml
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:022
• http://www.redhat.com/support/errata/RHSA-2005-293.html
• http://www.redhat.com/support/errata/RHSA-2006-0190.html
• http://www.redhat.com/support/errata/RHSA-2006-0191.html
• http://www.securityfocus.com/bid/11052
• http://www.securityfocus.com/bid/11937
• https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17151
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10427
• https://usn.ubuntu.com/38-1/

• Race condition in Linux kernel
• Gentoo update for Linux Kernel