oss-security - CVE request: kernel: bfa driver sysfs crash

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <4CFEFE36.5060905@redhat.com>
Date: Wed, 08 Dec 2010 11:40:38 +0800
From: Eugene Teo <eugene@...hat.com>
To: oss-security@...ts.openwall.com
CC: "Steven M. Christey" <coley@...us.mitre.org>
Subject: CVE request: kernel: bfa driver sysfs crash

The port data structure related to fc_host statistics collection is not
initialized. This causes system crash when reading the fc_host 
statistics. The fix is to initialize port structure during driver attach.

This can be triggered by reading the fc statistics files under
/sys/class/fc_host/host#/statistics.

A bfa adapter must be present in the system for the problem to occur.

Upstream commit:
http://git.kernel.org/linus/7873ca4e4401f0ecd8868bf1543113467e6bae61

Reference:
https://bugzilla.redhat.com/show_bug.cgi?id=661182
http://www.spinics.net/lists/linux-scsi/msg43772.html

Thanks, Eugene

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.