The do_task_stat function in fs/proc/array.c in the Linux kernel before 2.6.39-rc1 does not perform an expected uid check, which makes it easier for local users to defeat the ASLR protection mechanism by reading the start_code and end_code fields in the /proc/#####/stat file for a process executing a PIE binary.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: canonical

Published: 2011-07-18T22:00:00

Updated: 2024-08-06T22:05:53.433Z

Reserved: 2011-02-01T00:00:00

Link: CVE-2011-0726

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2011-07-18T22:55:00.923

Modified: 2023-11-07T02:06:51.500

Link: CVE-2011-0726

cve-icon Redhat

Severity : Low

Publid Date: 2011-03-11T00:00:00Z

Links: CVE-2011-0726 - Bugzilla