oss-sec mailing list archives
Re: CVE request - gfs2 kernel issue
From: Josh Bressers <bressers () redhat com>
Date: Tue, 27 Apr 2010 20:09:26 -0400 (EDT)
Please use CVE-2010-1436 Thanks. -- JB ----- "Eugene Teo" <eugene () redhat com> wrote:
When a struct gfs2_quota straddles a page boundary, the two pages required to write out the complete quota were not being updated. Instead, the first page was being written beyond its end. This buffer overflow can cause a kernel panic. Since only the value field in struct gfs2_quota needs to be updated and it's a 64-bit quantity that doesn't ever straddle a page boundary by itself, we can seek to the proper page where this value lies and write to it. Steps to reproduce: https://bugzilla.redhat.com/show_bug.cgi?id=586006 My colleague will be posting the patch for the upstream kernel soon. Thanks, eugene
Current thread:
- CVE request - gfs2 kernel issue Eugene Teo (Apr 26)
- Re: CVE request - gfs2 kernel issue Josh Bressers (Apr 27)