oss-security - Re: CVE request: kernel: validate size of EFI GUID partition entries

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Mon, 9 May 2011 15:01:06 -0400 (EDT)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: "Steven M. Christey" <coley@...us.mitre.org>
Subject: Re: CVE request: kernel: validate size of EFI GUID
 partition entries

----- Original Message -----
> The kernel automatically evaluates partition tables of storage
> devices.
> The code for evaluating GUID partitions (in fs/partitions/efi.c)
> contains a bug that can cause a kernel heap overflow on certain
> corrupted GUID partition tables.
> 
> http://git.kernel.org/linus/fa039d5f6b126fbd65eefa05db2f67e44df8f121
> http://bugzilla.redhat.com/show_bug.cgi?id=703026
> 

Please use CVE-2011-1776

Thanks.

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.