[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <20101104194416.GI5144@ksplice.com>
Date: Thu, 4 Nov 2010 15:44:16 -0400
From: Nelson Elhage <nelhage@...lice.com>
To: oss-security@...ts.openwall.com
Subject: CVE request: kernel: logic error in INET_DIAG bytecode auditing
INET_DIAG is inconsistent about how it looks up the bytecode contained in a
netlink message, making it possible for a user to cause the kernel to execute
unaudited INET_DIAG bytecode.
This can be abused to make the kernel enter an infinite loop, and possibly other
consequences, although I haven't thought of anything else interesting.
Reference:
http://www.spinics.net/lists/netdev/msg145899.html
- Nelson
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
