Bugzilla – Bug 85834
VUL-0: CVE-2005-1765: kernel: Compat mode program can hang kernel
Last modified: 2021-11-08 13:19:13 UTC
The follow program can hang a kernel when compile to 32 bit binary. #include <unistd.h> int main() { void *p = (void *)0xFFFFE000UL; read(0, p, 4096); } I will post a patch to fix it
Created attachment 38078 [details] a patch to fix it
Andi, is this patch correct? What about disclosure of this problem - can we include it in SP2?
Patch is correct yes. I don't think we need a disclosure time for this because it is only a DOS. Hubert, please apply to all 2.6 trees.
Small addon: it is not needed anymore on HEAD and 9.3 - a different change there incidentially fixed that one too. That means it is only needed on maintained 2.6 x86-64 trees.
so missing on branches: 9.2, SLES9 SP1, SLES9 SP2.
Ok, done. Kernels have been submitted for check in.
on my 9.3 x86_64 with the now cancelled kernel update it hangs just as it does on 9.2 so I'd say this has to go into 9.3 as well.
patch put into 9.3, lets hope it works.
Is this fixed for SP2?
Thu Jun 2 14:06:10 CEST 2005 - mantel@suse.de - patches.fixes/syscall-page-fix: x86_64: Compat mode program can hang kernel (85834).
Yes it is.
CAN-2005-1765
updates released
CVE-2005-1765: CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)