Race Condition Vulnerabilities in Linux Kernel 2.4.x and 2.6.x

CVE-2004-0814

Summary

Multiple race conditions exist in the terminal layer of Linux Kernel versions 2.4.x and 2.6.x prior to 2.6.9. These vulnerabilities allow local users to inadvertently access portions of sensitive kernel data through a TIOCSETD ioctl call when a terminal interface is concurrently accessed by another thread. Additionally, a remote attacker may exploit these conditions to induce a denial of service by rapidly switching from console to PPP line discipline and sending data during this transition. This malfunction can lead to instability in system operations, potentially resulting in crashes.

References