oss-security - Re: CVE request kernel: flood ping cause out-of-iommu error and panic when mtu larger than 1500

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <1961813405.357071255617098297.JavaMail.root@zmail01.collab.prod.int.phx2.redhat.com>
Date: Thu, 15 Oct 2009 10:31:38 -0400 (EDT)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: "Steven M. Christey" <coley@...us.mitre.org>
Subject: Re: CVE request kernel: flood ping cause
 out-of-iommu error and panic when mtu larger than 1500

Use CVE-2009-3613 for this.

Thanks.

-- 
    JB


----- "Eugene Teo" <eugeneteo@...nel.sg> wrote:

> Executing ping -f -s 3000 IP in a certain network setup could trigger
> an 
> out-of-IOMMU error, leading to a denial of service.
> 
> Steps to reproduce the issue:
> https://bugzilla.redhat.com/show_bug.cgi?id=529137#c0
> 
> Triggering the issue would result in:
> PCI-DMA: Out of IOMMU space for 7222 bytes at device 0000:03:00.0
> PCI-DMA: Out of IOMMU space for 7222 bytes at device 0000:03:00.0
> <Repeated Many Many Times>
> PCI-DMA: Out of IOMMU space for 7222 bytes at device 0000:03:00.0
> PCI-DMA: Out of IOMMU space for 7222 bytes at device 0000:03:00.0
> 
> HARDWARE ERROR
> CPU 0: Machine Check Exception:                7 Bank 4:
> bc0000000005001b
> RIP 10:<ffffffff8006b2b0> {default_idle+0x29/0x50}
> TSC 10116da2355 ADDR 4000000 MISC c008000001000000
> This is not a software problem!
> Run through mcelog --ascii to decode and contact your hardware vendor
> Kernel panic - not syncing: Uncorrected machine check
>   <7>APIC error on CPU2: 00(08)
> 
> Upstream commits:
> http://git.kernel.org/linus/a866bbf6aacf95f849810079442a20be118ce905
> http://git.kernel.org/linus/97d477a914b146e7e6722ded21afa79886ae8ccd
> 
> References:
> http://bugzilla.kernel.org/show_bug.cgi?id=9468
> https://bugzilla.redhat.com/show_bug.cgi?id=529137
> 
> Thanks, Eugene

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.