oss-security - CVE request: kernel: perf_counter: Fix buffer overflow in perf_copy

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Wed, 16 Sep 2009 13:16:01 +0800
From: Eugene Teo <eugeneteo@...nel.sg>
To: oss-security@...ts.openwall.com
CC: "Steven M. Christey" <coley@...us.mitre.org>
Subject: CVE request: kernel: perf_counter: Fix buffer overflow in perf_copy_attr()

kernel/perf_counter.c was introduced in commit 0793a61d (v2.6.31-rc1).

"If we pass a big size data over perf_counter_open() syscall, the kernel 
will copy this data to a small buffer, it will cause kernel crash."

Upstream commit: b3e62e35058fc744ac794611f4e79bcd1c5a4b83

Thanks, Eugene

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.