CVE-2011-2503

The insert_module function in runtime/staprun/staprun_funcs.c in the
systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly
validate a module when loading it, which allows local users to gain
privileges via a race condition between the signature validation and the
module initialization.

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=635542&gt;
• <https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2503&gt;