Secunia

A vulnerability has been reported in the Linux Kernel, which can be exploited by malicious, local users to disclose potentially sensitive information.

The vulnerability is caused due to an error within the "mm_for_maps()" function in fs/proc/base.c. This can be exploited to disclose the content of the "maps" and "smaps" files from the "/proc" filesystem for a setuid process which is starting.

Solution
Update to version 2.6.30.5.

Provided and/or discovered by
Red Hat credits Kees Cook and Steve Beattie.

Changelog
Further details available in Customer Area

Original Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=516171

http://git.kernel.org/linus/13f0feafa6b8aead57a2a328e2fca6a5828bf286

Deep Links
Links available in Customer Area