[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <CALJHwhTWAWPjfWD1nLho+zxXneEt_CCbYFROJY=trcDvqsA7uw@mail.gmail.com>
Date: Wed, 30 Sep 2020 10:35:56 +1000
From: Wade Mealing <wmealing@...hat.com>
To: oss-security@...ts.openwall.com
Subject: CVE-2020-25641 kernel: soft lockup when submitting zero length bvecs.
Gday,
A flaw was found in the Linux kernels implementation of biovec usage. A
zero-length biovec request issued to the block subsystem could cause the
kernel to enter an infinite loop causing a denial of service. An attacker
with a local account can issue requests to a block device can cause a
denial of service.
This has been assigned CVE-2020-25641,
According to the fix commits "Introduced in":
# git tag --contains 1bdc76aea115 | head -n 1
v4.10
Fixed by:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7e24969022cbd61ddc586f14824fc205661bb124
Thank you.
--
Wade Mealing
Product Security - Kernel, RHCE
Red Hat
<https://www.redhat.com>
wmealing@...hat.com
<https://red.ht/sig>
TRIED. TESTED. TRUSTED. <https://redhat.com/trusted>
secalert@...hat.com for urgent response
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
