Re: Subject: [oss-security] CVE request: kernel: install_special_mapping skips security_file_mmap check

[Josh Bressers <bressers () redhat com>]

Please use CVE-2010-4346

Thanks.

-- 
    JB


----- "Petr Matousek" <pmatouse () redhat com> wrote:

> "The install_special_mapping routine (used, for example, to setup the
> vdso)
> skips the security check before insert_vm_struct, allowing a local
> attacker to
> bypass the mmap_min_addr security restriction by limiting the
> available pages
> for special mappings."
>
> Credit: Tavis Ormandi
>
> Reference:
> https://lkml.org/lkml/2010/12/9/222
> https://bugzilla.redhat.com/show_bug.cgi?id=662189
>
> Thanks,
> --
> Petr Matousek / Red Hat Security Response Team