oss-sec mailing list archives

CVE Request: Linux kernel: panic while pushing pending data out of an IPv6 socket with UDP_CORK enabled.


From: P J P <ppandit () redhat com>
Date: Wed, 24 Jul 2013 00:48:02 +0530 (IST)

  Hi,

Linux kernel built with IPv6 networking is vulnerable to a crash while sending data as a single datagram over IPv6 socket when UDP_CORK option set. UDP_CORK enables accumulating data and sending it as a single datagram.

Upstream fix:
-------------
 -> https://git.kernel.org/linus/8822b64a0fa64a5dd1dfcf837c5b0be83f8c05d1

Reference:
----------
 -> https://bugzilla.redhat.com/show_bug.cgi?id=987627

Acknowledgement:
-----------------
Red Hat would like to thank Hannes Frederic Sowa for reporting this issue.


Thank you!
--
Prasad J Pandit / Red Hat Security Response Team
DB7A 84C5 D3F9 7CD1 B5EB  C939 D048 7860 3655 602B


Current thread: