oss-security - CVE request - kernel: ima: fix null pointer dereference

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Mon, 08 Feb 2010 09:30:48 +0800
From: Eugene Teo <eugene@...hat.com>
To: oss-security@...ts.openwall.com
CC: "Steven M. Christey" <coley@...us.mitre.org>
Subject: CVE request - kernel: ima: fix null pointer dereference

Was cc'ed this in a couple of kernel mailing lists.

This was introduced in 6c21a7fb4 (v2.6.33-rc1).

It was first reported here http://lkml.org/lkml/2009/12/29/13, and 
subsequently here http://lkml.org/lkml/2010/2/5/76 (backtraces).

This can be reproduced by running ltp test pipe07.

http://groups.google.com/group/linux.kernel/msg/95986c94ea55c81a.
https://bugzilla.redhat.com/show_bug.cgi?id=562597

Mainline fix: https://bugzilla.redhat.com/show_bug.cgi?id=562597#c3

Thanks, Eugene
-- 
Eugene Teo / Red Hat Security Response Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.