oss-security - CVE request - kernel: perf, powerpc: Handle events that raise an exception without overflowing

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <4EE9B7E2.6050508@redhat.com>
Date: Thu, 15 Dec 2011 17:03:30 +0800
From: Eugene Teo <eugene@...hat.com>
To: oss-security@...ts.openwall.com
CC: "Steven M. Christey" <coley@...us.mitre.org>
Subject: CVE request - kernel: perf, powerpc: Handle events that raise an
 exception without overflowing

This does not affect the upstream kernel as it is already fixed. This is
an issue that was introduced when fixing https://bugzilla.redhat.com/740465.

A PMC is 32 bits (ie an int). When we pass it around as an unsigned
long, we need to cast it before doing the comparison. Using perf on
power machine with a local, unprivileged user account can cause a denial
of service.

Upstream commit:
http://git.kernel.org/linus/0837e3242c73566fc1c0196b4ec61779c25ffc93

Reference:
https://bugzilla.redhat.com/767914

Thanks, Eugene

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.