oss-security - Re: CVE request: kernel: mm: mem allocated invisible to oom

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Mon, 22 Nov 2010 11:32:40 -0500 (EST)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: "Steven M. Christey" <coley@...us.mitre.org>
Subject: Re: CVE request: kernel: mm: mem allocated invisible
 to oom_kill() when not attached to any threads

Please use CVE-2010-4243

Thanks.

-- 
    JB


----- "Eugene Teo" <eugene@...hat.com> wrote:

> This is the OOM dodging issue that can be triggered with Brad's 
> reproducer at http://grsecurity.net/~spender/64bit_dos.c. Written
> in the comments: "The second bug here is that the memory usage
> explodes 
> within the kernel from a single 128k allocation in userland The 
> explosion of memory isn't accounted for by any task so it won't be 
> terminated by the OOM killer."
> 
> I don't recall seeing a CVE name assigned to this, so please assign
> one. 
> Upstream is still attempting to fix this.
> 
> https://bugzilla.redhat.com/show_bug.cgi?id=625688#c0
> 
> Thanks, Eugene

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.