oss-security - CVE request: kernel: soft lockup occurs when network load is very high

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <4950AE79.7020400@redhat.com>
Date: Tue, 23 Dec 2008 17:25:13 +0800
From: Eugene Teo <eteo@...hat.com>
To: oss-security@...ts.openwall.com
CC: "Steven M. Christey" <coley@...us.mitre.org>
Subject: CVE request: kernel: soft lockup occurs when network load is very
 high

Steve, can you please assign a CVE name for the following issue:

"[NET]: Add preemption point in qdisc_run

The qdisc_run loop is currently unbounded and runs entirely in a
softirq.  This is bad as it may create an unbounded softirq run.

This patch fixes this by calling need_resched and breaking out if
necessary.

It also adds a break out if the jiffies value changes since that would
indicate we've been transmitting for too long which starves other
softirqs."

Problem is fixed upstream since 2ba2506ca7ca62c56edaa334b0fe61eb5eab6ab0

Reference:
https://bugzilla.redhat.com/show_bug.cgi?id=477744

Reproducer:
https://bugzilla.redhat.com/attachment.cgi?id=327745

This can be triggered by an unprivileged user.

Thanks, Eugene

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.