oss-security - CVE Request: kernel: fs/partitions: Corrupted OSF partition table can cause information disclosure

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <4D7F23F0.2050409@pre-sense.de>
Date: Tue, 15 Mar 2011 09:31:44 +0100
From: Timo Warns <warns@...-sense.de>
To: oss-security@...ts.openwall.com
Subject: CVE Request: kernel: fs/partitions: Corrupted OSF partition table
 can cause information disclosure

The kernel automatically evaluates partition tables of storage devices.
The code for evaluating OSF partitions (in fs/partitions/osf.c)
contains a bug that leaks data from kernel heap memory to userspace for
certain corrupted OSF partitions.

See http://www.spinics.net/lists/mm-commits/msg82737.html for a patch.

Cheers, Timo

-- 
Dr. Timo Warns                               warns@...-sense.de
                                  Tel. +49 - 40 - 244 2407 - 16
                                  Fax  +49 - 40 - 244 2407 - 24
PRESENSE Technologies GmbH            Sachsenstr. 5, D-20097 HH
                                         USt-IdNr.: DE263765024
Geschäftsführer/Managing Directors       AG Hamburg, HRB 107844
Till Dörges           Jürgen Sander              Axel Theilmann

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.