oss-security - Re: CVE requests - kernel network vulns

Openwall GNU/*/Linux 3.0 - a small security-enhanced Linux distro for servers

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Thu, 5 May 2011 15:44:16 -0400 (EDT)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: "Steven M. Christey" <coley@...us.mitre.org>
Subject: Re: CVE requests - kernel network vulns

----- Original Message -----
> On 02/18/2010 01:12 PM, Eugene Teo wrote:
> > 1) gre: fix netns vs proto registration ordering
> > http://patchwork.ozlabs.org/patch/45553/
> >
> > "GRE protocol receive hook can be called right after protocol addition
> > is done. If netns stuff is not yet initialized, we're going to oops in
> > net_generic().
> >
> > This is remotely oopsable if ip_gre is compiled as module and packet
> > comes at unfortunate moment of module loading."

Use CVE-2011-1767

> >
> > 2) tunnels: fix netns vs proto registration ordering
> > http://patchwork.ozlabs.org/patch/45554/
> >
> > "Same stuff as in ip_gre patch: receive hook can be called before netns
> > setup is done, oopsing in net_generic()."
> 

Use CVE-2011-1768

Thanks.

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.