oss-security - CVE-2009-1192 kernel: agp: zero pages before sending to userspace

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [day] [month] [year] [list]

Date: Wed, 22 Apr 2009 14:15:42 +0800
From: Eugene Teo <eugene@...hat.com>
To: oss-security@...ts.openwall.com
CC: "Steven M. Christey" <coley@...us.mitre.org>
Subject: CVE-2009-1192 kernel: agp: zero pages before sending to userspace

"AGP pages might be mapped into userspace finally, so the pages should
be set to zero before userspace can use it. Otherwise there is potential
information leakage."

http://git.kernel.org/linus/59de2bebabc5027f93df999d59cc65df591c3e6e
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-1192

Thanks, Eugene
-- 
Eugene Teo / Red Hat Security Response Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.