oss-security - Re: CVE requests - kernel network vulns

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu, 05 May 2011 18:06:13 +0800
From: Eugene Teo <eugene@...hat.com>
To: oss-security@...ts.openwall.com
CC: "Steven M. Christey" <coley@...us.mitre.org>
Subject: Re: CVE requests - kernel network vulns

On 02/18/2010 01:12 PM, Eugene Teo wrote:
> 1) gre: fix netns vs proto registration ordering
> http://patchwork.ozlabs.org/patch/45553/
>
> "GRE protocol receive hook can be called right after protocol addition
> is done. If netns stuff is not yet initialized, we're going to oops in
> net_generic().
>
> This is remotely oopsable if ip_gre is compiled as module and packet
> comes at unfortunate moment of module loading."
>
> 2) tunnels: fix netns vs proto registration ordering
> http://patchwork.ozlabs.org/patch/45554/
>
> "Same stuff as in ip_gre patch: receive hook can be called before netns
> setup is done, oopsing in net_generic()."

Josh, can you please assign two CVEs for these? Thanks.

Eugene

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.