The kill_something_info function in kernel/signal.c in the Linux kernel before 2.6.28 does not consider PID namespaces when processing signals directed to PID -1, which allows local users to bypass the intended namespace isolation, and send arbitrary signals to all processes in all namespaces, via a kill command.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2009-04-22T15:00:00

Updated: 2024-08-07T05:13:25.641Z

Reserved: 2009-04-17T00:00:00

Link: CVE-2009-1338

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2009-04-22T15:30:00.217

Modified: 2023-11-07T02:03:53.463

Link: CVE-2009-1338

cve-icon Redhat

Severity : Moderate

Publid Date: 2008-10-29T00:00:00Z

Links: CVE-2009-1338 - Bugzilla