oss-security - CVE request: kernel: ext4: init timer earlier to avoid a kernel panic in __save_error

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20110623213845.GP25507@outflux.net>
Date: Thu, 23 Jun 2011 14:38:45 -0700
From: Kees Cook <kees@...ntu.com>
To: oss-security@...ts.openwall.com
Cc: "Steven M. Christey" <coley@...us.mitre.org>
Subject: CVE request: kernel: ext4: init timer earlier to avoid a kernel
 panic in __save_error_info

This came to our attention:
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=0449641130f5
by way of https://bugs.launchpad.net/ubuntu/+source/linux/+bug/801087 and
https://bugzilla.kernel.org/show_bug.cgi?id=32082

"During mount, when we fail to open journal inode or root inode, the
__save_error_info will mod_timer. But actually s_err_report isn't
initialized yet and the kernel oops."

Thanks,

-Kees

-- 
Kees Cook
Ubuntu Security Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.