Linux kernel RLIMIT_CPU security bypass
| linux-kernel-rlimitcpu-security-bypass (42145) |  Low Risk |
Description:
The Linux kernel could allow a local attacker to bypass security restrictions, caused by improper checking on resource limit settings. By setting RLIMIT_CPU to 0, an attacker could bypass CPU usage restrictions.
Platforms Affected:
- Canonical, Ubuntu 6.06 LTS
- Canonical, Ubuntu 7.04
- Canonical, Ubuntu 7.10
- Debian, Debian Linux 4.0
- Linux, Kernel 2.6.16
- Linux, Kernel 2.6.16 rc7
- Linux, Kernel 2.6.16 rc6
- Linux, Kernel 2.6.16 rc5
- Linux, Kernel 2.6.16 rc4
- Linux, Kernel 2.6.16 rc3
- Linux, Kernel 2.6.16 rc2
- Linux, Kernel 2.6.16 rc1
- Linux, Kernel 2.6.16.1
- Linux, Kernel 2.6.16.10
- Linux, Kernel 2.6.16.11
- Linux, Kernel 2.6.16.12
- Linux, Kernel 2.6.16.13
- Linux, Kernel 2.6.16.14
- Linux, Kernel 2.6.16.15
- Linux, Kernel 2.6.16.16
- Linux, Kernel 2.6.16.17
- Linux, Kernel 2.6.16.18
- Linux, Kernel 2.6.16.19
- Linux, Kernel 2.6.16.2
- Linux, Kernel 2.6.16.20
- Linux, Kernel 2.6.16.21
- Linux, Kernel 2.6.16.22
- Linux, Kernel 2.6.16.23
- Linux, Kernel 2.6.16.24
- Linux, Kernel 2.6.16.25
- Linux, Kernel 2.6.16.26
- Linux, Kernel 2.6.16.27
- Linux, Kernel 2.6.16.28
- Linux, Kernel 2.6.16.29
- Linux, Kernel 2.6.16.3
- Linux, Kernel 2.6.16.30
- Linux, Kernel 2.6.16.31
- Linux, Kernel 2.6.16.32
- Linux, Kernel 2.6.16.33
- Linux, Kernel 2.6.16.34
- Linux, Kernel 2.6.16.35
- Linux, Kernel 2.6.16.36
- Linux, Kernel 2.6.16.37
- Linux, Kernel 2.6.16.38
- Linux, Kernel 2.6.16.39
- Linux, Kernel 2.6.16.4
- Linux, Kernel 2.6.16.40
- Linux, Kernel 2.6.16.41
- Linux, Kernel 2.6.16.43
- Linux, Kernel 2.6.16.44
- Linux, Kernel 2.6.16.45
- Linux, Kernel 2.6.16.46
- Linux, Kernel 2.6.16.47
- Linux, Kernel 2.6.16.48
- Linux, Kernel 2.6.16.49
- Linux, Kernel 2.6.16.5
- Linux, Kernel 2.6.16.50
- Linux, Kernel 2.6.16.51
- Linux, Kernel 2.6.16.52
- Linux, Kernel 2.6.16.53
- Linux, Kernel 2.6.16.6
- Linux, Kernel 2.6.16.7
- Linux, Kernel 2.6.16.8
- Linux, Kernel 2.6.16.9
- Linux, Kernel 2.6.17 rc1
- Linux, Kernel 2.6.17
- Linux, Kernel 2.6.17 rc6
- Linux, Kernel 2.6.17 rc5
- Linux, Kernel 2.6.17 rc4
- Linux, Kernel 2.6.17 rc3
- Linux, Kernel 2.6.17 rc2
- Linux, Kernel 2.6.17.1
- Linux, Kernel 2.6.17.10
- Linux, Kernel 2.6.17.11
- Linux, Kernel 2.6.17.12
- Linux, Kernel 2.6.17.13
- Linux, Kernel 2.6.17.14
- Linux, Kernel 2.6.17.2
- Linux, Kernel 2.6.17.3
- Linux, Kernel 2.6.17.4
- Linux, Kernel 2.6.17.5
- Linux, Kernel 2.6.17.6
- Linux, Kernel 2.6.17.7
- Linux, Kernel 2.6.17.8
- Linux, Kernel 2.6.17.9
- Linux, Kernel 2.6.18 rc3
- Linux, Kernel 2.6.18 rc4
- Linux, Kernel 2.6.18 rc6
- Linux, Kernel 2.6.18 rc7
- Linux, Kernel 2.6.18
- Linux, Kernel 2.6.18 rc5
- Linux, Kernel 2.6.18 rc2
- Linux, Kernel 2.6.18 rc1
- Linux, Kernel 2.6.18 8.1.8.El5
- Linux, Kernel 2.6.18.1
- Linux, Kernel 2.6.18.10
- Linux, Kernel 2.6.18.11
- Linux, Kernel 2.6.18.12
- Linux, Kernel 2.6.18.13
- Linux, Kernel 2.6.18.14
- Linux, Kernel 2.6.18.15
- Linux, Kernel 2.6.18.16
- Linux, Kernel 2.6.18.17
- Linux, Kernel 2.6.18.18
- Linux, Kernel 2.6.18.19
- Linux, Kernel 2.6.18.2
- Linux, Kernel 2.6.18.20
- Linux, Kernel 2.6.18.21
- Linux, Kernel 2.6.18.22
- Linux, Kernel 2.6.18.23
- Linux, Kernel 2.6.18.24
- Linux, Kernel 2.6.18.25
- Linux, Kernel 2.6.18.26
- Linux, Kernel 2.6.18.27
- Linux, Kernel 2.6.18.28
- Linux, Kernel 2.6.18.29
- Linux, Kernel 2.6.18.3
- Linux, Kernel 2.6.18.30
- Linux, Kernel 2.6.18.31
- Linux, Kernel 2.6.18.32
- Linux, Kernel 2.6.18.33
- Linux, Kernel 2.6.18.34
- Linux, Kernel 2.6.18.35
- Linux, Kernel 2.6.18.36
- Linux, Kernel 2.6.18.37
- Linux, Kernel 2.6.18.38
- Linux, Kernel 2.6.18.39
- Linux, Kernel 2.6.18.4
- Linux, Kernel 2.6.18.40
- Linux, Kernel 2.6.18.41
- Linux, Kernel 2.6.18.42
- Linux, Kernel 2.6.18.43
- Linux, Kernel 2.6.18.44
- Linux, Kernel 2.6.18.45
- Linux, Kernel 2.6.18.46
- Linux, Kernel 2.6.18.47
- Linux, Kernel 2.6.18.48
- Linux, Kernel 2.6.18.49
- Linux, Kernel 2.6.18.5
- Linux, Kernel 2.6.18.50
- Linux, Kernel 2.6.18.51
- Linux, Kernel 2.6.18.52
- Linux, Kernel 2.6.18.53
- Linux, Kernel 2.6.18.6
- Linux, Kernel 2.6.18.7
- Linux, Kernel 2.6.18.8
- Linux, Kernel 2.6.18.9
- Linux, Kernel 2.6.19
- Linux, Kernel 2.6.19 rc4
- Linux, Kernel 2.6.19 rc3
- Linux, Kernel 2.6.19 rc2
- Linux, Kernel 2.6.19 rc1
- Linux, Kernel 2.6.19.1
- Linux, Kernel 2.6.19.2
- Linux, Kernel 2.6.19.3
- Linux, Kernel 2.6.2 rc1
- Linux, Kernel 2.6.2 rc3
- Linux, Kernel 2.6.2
- Linux, Kernel 2.6.2 rc2
- Linux, Kernel 2.6.20
- Linux, Kernel 2.6.20 rc2
- Linux, Kernel 2.6.20.1
- Linux, Kernel 2.6.20.10
- Linux, Kernel 2.6.20.11
- Linux, Kernel 2.6.20.12
- Linux, Kernel 2.6.20.13
- Linux, Kernel 2.6.20.14
- Linux, Kernel 2.6.20.15
- Linux, Kernel 2.6.20.2
- Linux, Kernel 2.6.20.3
- Linux, Kernel 2.6.20.4
- Linux, Kernel 2.6.20.5
- Linux, Kernel 2.6.20.6
- Linux, Kernel 2.6.20.7
- Linux, Kernel 2.6.20.8
- Linux, Kernel 2.6.20.9
- Linux, Kernel 2.6.21
- Linux, Kernel 2.6.21 git6
- Linux, Kernel 2.6.21 git7
- Linux, Kernel 2.6.21 git5
- Linux, Kernel 2.6.21 git4
- Linux, Kernel 2.6.21 git3
- Linux, Kernel 2.6.21 git2
- Linux, Kernel 2.6.21 rc3
- Linux, Kernel 2.6.21 rc4
- Linux, Kernel 2.6.21 rc5
- Linux, Kernel 2.6.21 rc6
- Linux, Kernel 2.6.21 rc7
- Linux, Kernel 2.6.21 git1
- Linux, Kernel 2.6.21.1
- Linux, Kernel 2.6.21.2
- Linux, Kernel 2.6.21.3
- Linux, Kernel 2.6.21.4
- RedHat, Enterprise Linux 5
- RedHat, Enterprise Linux 5 Client
Remedy:
Upgrade to the latest version of the Linux kernel (2.6.22 or later), available from the Linux Kernel Archives Web site. See References.
Consequences:
Bypass Security
References:
- Debian Bug report logs - #419706, setrlimit(RLIMIT_CPUINFO) with zero value doesn't inherit properly across children at http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=419706.
- The Linux Kernel Archives Web site, ChangeLog-2.6.22, Tue May 8 00:30:31 2007 -0700 at http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.
- BID-29004: Linux Kernel RLIMIT_CPU Zero Limit Handling Local Security Bypass Vulnerability
- CVE-2008-1294: Linux kernel 2.6.17, and other versions before 2.6.22, does not check when a user attempts to set RLIMIT_CPU to 0 until after the change is made, which allows local users to bypass intended resource limits.
- DSA-1565: linux-2.6 -- several vulnerabilities
- RHSA-2008-0612: Important: kernel security and bug fix update
- USN-618-1: Linux kernel vulnerabilities
Reported:
May 01, 2008
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
Copyright (c) 1994-2008 Internet Security Systems, Inc. All rights reserved worldwide.
For corrections or additions please email xforce@iss.net