Re: CVE request: kernel: Unix sockets kernel panic

["Steven M. Christey" <coley () linus mitre org>]

current writeup for CVE-2008-5300:

======================================================
Name: CVE-2008-5300
Status: Candidate
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5300
Reference: MLIST:[linux-netdev] 20081120 soft lockups/OOM after unix socket fixes
Reference: URL:http://marc.info/?l=linux-netdev&m=122721862313564&w=2
Reference: MLIST:[linux-netdev] 20081125 [PATCH] Fix soft lockups/OOM issues w/ unix garbage collector
Reference: URL:http://marc.info/?l=linux-netdev&m=122765505415944&w=2
Reference: CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=470201

Linux kernel 2.6.28 allows local users to cause a denial of service
("soft lockup" and process loss) via a large number of sendmsg
function calls, which does not block during AF_UNIX garbage collection
and triggers an OOM condition, a different vulnerability than
CVE-2008-5029.