Linux Kernel 'fasync_helper()' Local Privilege Escalation Vulnerability

Linux Kernel 'fasync_helper()' Local Privilege Escalation Vulnerability

References:

fasync: split 'fasync_helper()' into separate add/remove functions (Linux)
Linux kernel Homepage (kernel.org)
Locked fasync file descriptors can be referenced after free in >= 2.6.28 (Tavis Ormandy)
ASA-2010-026 (Avaya)
ASA-2010-123 kernel security and bug fix update (RHSA-2010-0149) (Avaya)
Linux kernel vulnerabilities (Ubuntu)

Privacy Statement
Copyright 2010, SecurityFocus