oss-sec mailing list archives

Re: CVE request: kernel: validate size of EFI GUID partition entries


From: Josh Bressers <bressers () redhat com>
Date: Mon, 9 May 2011 15:01:06 -0400 (EDT)



----- Original Message -----
The kernel automatically evaluates partition tables of storage
devices.
The code for evaluating GUID partitions (in fs/partitions/efi.c)
contains a bug that can cause a kernel heap overflow on certain
corrupted GUID partition tables.

http://git.kernel.org/linus/fa039d5f6b126fbd65eefa05db2f67e44df8f121
http://bugzilla.redhat.com/show_bug.cgi?id=703026


Please use CVE-2011-1776

Thanks.

-- 
    JB


Current thread: