Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [day] [month] [year] [list]
Date: Tue, 13 Jan 2009 19:23:59 +0800
From: "Eugene Teo" <eugeneteo@...nel.sg>
To: oss-security@...ts.openwall.com
Cc: "Steven M. Christey" <coley@...us.mitre.org>
Subject: CVE-2008-4307 kernel: local denial of service in locks_remove_flock

There is a fcntl/close race in the Linux kernel that can be abused by
a local, unprivileged user to cause a denial of service.

The issue was fixed in upstream commit c4d7c402b788b73dc24f1e54a57f89d3dc5eb7bc.

More details can be found at:
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-4307

Thanks, Eugene

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ