oss-sec mailing list archives

CVE Request Linux kernel: fs: isofs: infinite loop in CE records


From: P J P <ppandit () redhat com>
Date: Wed, 17 Dec 2014 16:32:56 +0530 (IST)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

   Hello,

Linux kernel built with the iso9660 file system(CONFIG_ISO9660_FS) support is vulnerable to an infinite recursion loop flaw, which could lead to a crash or render a system unresponsive/unusable after a while. This occurs while mounting an iso9660 image.

An unprivileged user/process could use this flaw to crash the system resulting in DoS.

Upstream fix:
- -------------
  -> https://git.kernel.org/linus/f54e18f1b831c92f6512d2eedb224cd63d607d3d

Thank you.
- --
Prasad J Pandit / Red Hat Product Security Team
47AF CE69 3A90 54AA 9045 1053 DD13 3D32 FE5B 041F

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=WHPo
-----END PGP SIGNATURE-----


Current thread: