[kernel-sec-discuss] r4907 - active

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-02-14 09:15:12 +0000 (Tue, 14 Feb 2017)
New Revision: 4907

Added:
   active/CVE-2017-5967
Log:
new linux issue


Added: active/CVE-2017-5967
===================================================================
--- active/CVE-2017-5967	                        (rev 0)
+++ active/CVE-2017-5967	2017-02-14 09:15:12 UTC (rev 4907)
@@ -0,0 +1,12 @@
+Description: The time subsystem in the Linux kernel through 4.9.9, when CONFIG_TIMER_STATS is enabled, allows local users to discover real PID values (as distinguished from PID values inside a PID namespace) by reading the /proc/timer_list file, related to the print_timer function in kernel/time/timer_list.c and the __timer_stats_timer_set_start_info function in kernel/time/timer.c. 
+References:
+ http://git.kernel.org/cgit/linux/kernel/git/tip/tip.git/commit/?id=dfb4357da6ddbdf57d583ba64361c9d792b0e0b1
+ https://bugzilla.kernel.org/show_bug.cgi?id=193921
+Notes:
+Bugs:
+upstream: pending
+3.16-upstream-stable:
+3.2-upstream-stable:
+sid:
+3.16-jessie-security:
+3.2-wheezy-security: