CyberRota Analysis
AI-GeneratedThe vulnerability arises from the ELF core dump code, which improperly handles memory allocation for program headers, allowing an unprivileged local user to exploit a race condition during a core dump operation. This can result in an out-of-bounds write on the kernel heap, potentially leading to privilege escalation. Organizations running systems that utilize ELF core dumps, particularly those allowing unprivileged users to share address spaces, should prioritize addressing this issue to mitigate the risk of unauthorized access.
Original NVD Description
The ELF core dump code counted the number of dumpable VM map entries, allocated a buffer for the corresponding program headers, then iterated over the map a second time to populate them. A process sharing the address space via rfork(2) can mutate the map between the two passes, causing the second pass to write program headers past the end of the buffer. An unprivileged local user sharing an address space with a process that dumps core can trigger an out-of-bounds write on the kernel heap, potentially leading to privilege escalation.
Related CVEs
Other vulnerabilities affecting the same vendor(s)