oss-security - Re: CVE request: kernel: bfa driver sysfs crash

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <191191892.863861291928271518.JavaMail.root@zmail01.collab.prod.int.phx2.redhat.com>
Date: Thu, 9 Dec 2010 15:57:51 -0500 (EST)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: "Steven M. Christey" <coley@...us.mitre.org>
Subject: Re: CVE request: kernel: bfa driver sysfs crash

Please use CVE-2010-4343

Thanks.

-- 
    JB

----- "Eugene Teo" <eugene@...hat.com> wrote:

> The port data structure related to fc_host statistics collection is
> not
> initialized. This causes system crash when reading the fc_host 
> statistics. The fix is to initialize port structure during driver
> attach.
> 
> This can be triggered by reading the fc statistics files under
> /sys/class/fc_host/host#/statistics.
> 
> A bfa adapter must be present in the system for the problem to occur.
> 
> Upstream commit:
> http://git.kernel.org/linus/7873ca4e4401f0ecd8868bf1543113467e6bae61
> 
> Reference:
> https://bugzilla.redhat.com/show_bug.cgi?id=661182
> http://www.spinics.net/lists/linux-scsi/msg43772.html
> 
> Thanks, Eugene

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.