[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-Id: <20150313232420.0AEDB6C0020@smtpvmsrv1.mitre.org>
Date: Fri, 13 Mar 2015 19:24:20 -0400 (EDT)
From: cve-assign@...re.org
To: ppandit@...hat.com
Cc: cve-assign@...re.org, oss-security@...ts.openwall.com
Subject: Re: CVE request: Linux kernel: tty: kobject reference leakage in tty_open
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
> Linux kernel built with the virtual console support(CONFIG_VT) is vulnerable
> to a NULL pointer dereference issue. It could occur while accessing pseudo
> terminal device(/dev/pts/*) files.
>
> An unprivileged user could use this flaw to crash the system kernel resulting
> in DoS.
>
> https://git.kernel.org/linus/c290f8358acaeffd8e0c551ddcc24d1206143376
> TTY: drop driver reference in tty_open fail path
>
> When tty_driver_lookup_tty fails in tty_open, we forget to drop a reference to the tty driver.
>
> Fix that by adding tty_driver_kref_put to the fail path.
Use CVE-2011-5321.
- --
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)
iQEcBAEBAgAGBQJVA3DXAAoJEKllVAevmvmsFMIH/1Qme8WOCcx7UQK/pwkVuJum
Fz040QuNKK+TWi6yWNpXNXsMYRlJVdtGqfQ5MtfyrpxtYs8YNVYVMpce/HTtVByR
neYXaOLe1APB/xftf1ohGnzl5J3pYd6b9Rv3dSMLa/Ox/1b+xaUdq+l4r751hX0x
NGETRMX/ZGjKn77MAKauSSf1ZnS7Mm19NSfLGXc/Of5VAFTwGJ/1HM7t+p0l2grA
kQYTzUqlVs3bC2ff2ACCL9TnT5JmeiUwMYZPa1ahdAvL2c7kShKHo/44ctzgpQQI
An3oD26zoSRQe4tqv8URe3bDCVdAyH89R23bsQDC3o8lj/v9Wep4jbTZwP50RJ4=
=w+iT
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
