Date: Wed, 24 Nov 2010 08:15:05 -0500 (EST) From: Josh Bressers <bressers@...hat.com> To: oss-security@...ts.openwall.com Cc: "Steven M. Christey" <coley@...us.mitre.org> Subject: Re: CVE request: kernel: unix socket local dos ----- "Eugene Teo" <eugene@...hat.com> wrote: > Reported by Vegard Nossum: "I found this program lying around on my > laptop. It kills my box (2.6.35) instantly by consuming a lot of > memory > (allocated by the kernel, so the process doesn't get killed by the OOM > > killer). As far as I can tell, the memory isn't being freed when the > program exits either. Maybe it will eventually get cleaned up the UNIX > > socket garbage collector thing, but in that case it doesn't get called > > quickly enough to save my machine at least." > > Reproducer: http://lkml.org/lkml/2010/11/23/395 > Partial fix: http://lkml.org/lkml/2010/11/23/450 > Reference: https://bugzilla.redhat.com/show_bug.cgi?id=656756 > Please use CVE-2010-4249 Thanks. -- JB
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Powered by Openwall GNU/*/Linux - Powered by OpenVZ