oss-security - CVE request: kernel: Unix sockets kernel panic

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / news community lists wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [thread-next>] [month] [year] [list]

Date: Thu, 6 Nov 2008 22:12:13 +0800
From: "Eugene Teo" <eugeneteo@...nel.sg>
To: oss-security@...ts.openwall.com
Cc: "Steven M. Christey" <coley@...us.mitre.org>
Subject: CVE request: kernel: Unix sockets kernel panic

Hi,

We need a CVE name for this issue. This was reported in netdev today.

"The following code causes a kernel panic on Linux 2.6.26:
http://darkircop.org/unix.c

I haven't investigated the bug so I'm not sure what is causing it, and
don't know if it's exploitable.  The code passes unix sockets from one
process to another using unix sockets.  The bug probably has to do
with closing file descriptors."

http://marc.info/?l=linux-netdev&m=122593044330973&w=2
https://bugzilla.redhat.com/show_bug.cgi?id=470201

There isn't a fix yet. Dave is working on it.

Thanks, Eugene

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.