|
Bugzilla – Full Text Bug Listing |
| Summary: | VUL-0: CVE-2005-1765: kernel: Compat mode program can hang kernel | ||
|---|---|---|---|
| Product: | [Novell Products] SUSE Security Incidents | Reporter: | ZouNanHai <nanhai.zou> |
| Component: | Incidents | Assignee: | Security Team bot <security-team> |
| Status: | RESOLVED FIXED | QA Contact: | Security Team bot <security-team> |
| Severity: | Critical | ||
| Priority: | P5 - None | CC: | linux-patch, security-team, suresh.b.siddha, yanmin.zhang |
| Version: | unspecified | ||
| Target Milestone: | --- | ||
| Hardware: | x86-64 | ||
| OS: | All | ||
| Whiteboard: | CVE-2005-1765: CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P) | ||
| Found By: | Other | Services Priority: | |
| Business Priority: | Blocker: | --- | |
| Marketing QA Status: | --- | IT Deployment: | --- |
| Attachments: | a patch to fix it | ||
Created attachment 38078 [details]
a patch to fix it
Andi, is this patch correct? What about disclosure of this problem - can we include it in SP2? Patch is correct yes. I don't think we need a disclosure time for this because it is only a DOS. Hubert, please apply to all 2.6 trees. Small addon: it is not needed anymore on HEAD and 9.3 - a different change there incidentially fixed that one too. That means it is only needed on maintained 2.6 x86-64 trees. so missing on branches: 9.2, SLES9 SP1, SLES9 SP2. Ok, done. Kernels have been submitted for check in. on my 9.3 x86_64 with the now cancelled kernel update it hangs just as it does on 9.2 so I'd say this has to go into 9.3 as well. patch put into 9.3, lets hope it works. Is this fixed for SP2? Thu Jun 2 14:06:10 CEST 2005 - mantel@suse.de - patches.fixes/syscall-page-fix: x86_64: Compat mode program can hang kernel (85834). Yes it is. CAN-2005-1765 updates released CVE-2005-1765: CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P) |
The follow program can hang a kernel when compile to 32 bit binary. #include <unistd.h> int main() { void *p = (void *)0xFFFFE000UL; read(0, p, 4096); } I will post a patch to fix it