oss-security - CVE Request: kernel -- local DOS (endless loop with interrupts disabled)

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <CA+rthh9y56D09z6pkcFyBSQ49Zwj2y=Rv+JckcOw+L0SvSD3zw@mail.gmail.com>
Date: Thu, 14 Feb 2013 19:39:23 +0100
From: Mathias Krause <minipli@...glemail.com>
To: oss-security@...ts.openwall.com
Cc: Eric Dumazet <edumazet@...gle.com>, "David S. Miller" <davem@...emloft.net>, 
	Brad Spengler <spender@...ecurity.net>
Subject: CVE Request: kernel -- local DOS (endless loop with interrupts disabled)

Hi,

Eric Dumazet recently fixed a local DOS in commit 77c1090 "net: fix
infinite loop in __skb_recv_datagram()"? An unprivileged local user
can easily trigger this bug and lock-up the system.

A reproducer is attached.

Thanks,
Mathias

View attachment "sock_lock.c" of type "text/x-csrc" (1030 bytes)

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.