[<prev] [next>] [day] [month] [year] [list]
Message-ID: <4F542215.7040103@redhat.com>
Date: Mon, 05 Mar 2012 10:16:53 +0800
From: Eugene Teo <eugene@...hat.com>
To: oss-security@...ts.openwall.com
CC: "stev >> \"Steven M. Christey\"" <coley@...us.mitre.org>
Subject: CVE-2011-4348 kernel: incomplete fix for CVE-2011-2482
When testing [CVE-2011-2482] with SELinux disabled (haven't triggered
panic on patched kernel with selinux on), the reproducer run after
regular user causes soft lookups and the machine becomes completely
unresponsive on patched kernel. Target machine was unresponsive after
remote part of reproducer (con) killed. Target with patched kernel
needed to be rebooted to start working regularly.
Upstream commit:
http://git.kernel.org/linus/ae53b5bd77719fed58086c5be60ce4f22bffe1c6
Reference:
https://bugzilla.redhat.com/CVE-2011-4348
Thanks, Eugene
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
