Threats tagged 'ghsa-328f-543x-9jvg'

CVE-2024-50271 is a vulnerability in the Linux kernel related to the enforcement of the RLIMIT_SIGPENDING resource limit for signals. A recent change caused the limit to be enforced unconditionally, even when override_rlimit was set, leading to failures in signal delivery with siginfo when the limit is reached. This can cause applications to behave unpredictably or crash, as they cannot properly handle certain signals like SIGSEGV. The issue was fixed by restoring the override_rlimit logic to skip the limit check when override_rlimit is set, reverting to the previous behavior.