Re: CVE Request: remote triggerable use-after-free in rpcbind

[Marcus Meissner <meissner () suse de>]

On Thu, Sep 17, 2015 at 02:51:26PM -0400, Steve Dickson wrote:
> On 09/17/2015 12:20 PM, cve-assign () mitre org wrote:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA256
> >
> > > http://www.spinics.net/lists/linux-nfs/msg53045.html
> > > https://bugzilla.suse.com/show_bug.cgi?id=946204
> >
> > > frees the netbuf caller_addr and caller_addr.buf. However, it does not
> > > clear xp_rtaddr, so xp_rtaddr.buf now refers to memory region A, which
> > > is free.
> > >
> > > ... It will reuse the buffer inside xp_rtaddr
> >
> > Use CVE-2015-7236.
> Will there be a bz opened up? 

Where should I open it? kernel.org?

Ciao, Marcus