|
Message-ID: <4C11765C.4090605@kernel.sg> Date: Fri, 11 Jun 2010 07:33:48 +0800 From: Eugene Teo <eugeneteo@...nel.sg> To: oss-security@...ts.openwall.com CC: "Steven M. Christey" <coley@...us.mitre.org> Subject: CVE-2010-2070 kernel-xen: ia64-xen: unset be from the task psr https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-2070 http://xenbits.xensource.com/xen-4.0-testing.hg?rev/42caadb14edb An unprivileged user can turn on BE by modifying the user mask of the PSR, resulting in at least a local denial of service. This issue can be triggered the same way CVE-2006-0742 was triggered, but both are not related (not a regression). Thanks, Eugene -- main(i) { putchar(182623909 >> (i-1) * 5&31|!!(i<7)<<6) && main(++i); }
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.