oss-security - CVE-2008-4307 kernel: local denial of service in locks_remove

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / news community lists wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [month] [year] [list]

Date: Tue, 13 Jan 2009 19:23:59 +0800
From: "Eugene Teo" <eugeneteo@...nel.sg>
To: oss-security@...ts.openwall.com
Cc: "Steven M. Christey" <coley@...us.mitre.org>
Subject: CVE-2008-4307 kernel: local denial of service in locks_remove_flock

There is a fcntl/close race in the Linux kernel that can be abused by
a local, unprivileged user to cause a denial of service.

The issue was fixed in upstream commit c4d7c402b788b73dc24f1e54a57f89d3dc5eb7bc.

More details can be found at:
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-4307

Thanks, Eugene

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.