oss-security - CVE request: kernel: ext4: init timer earlier to avoid a kernel panic in __save_error

Openwall GNU/*/Linux 3.0 - a small security-enhanced Linux distro for servers

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Thu, 23 Jun 2011 14:38:45 -0700
From: Kees Cook <kees@...ntu.com>
To: oss-security@...ts.openwall.com
Cc: "Steven M. Christey" <coley@...us.mitre.org>
Subject: CVE request: kernel: ext4: init timer earlier to avoid a kernel
 panic in __save_error_info

This came to our attention:
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=0449641130f5
by way of https://bugs.launchpad.net/ubuntu/+source/linux/+bug/801087 and
https://bugzilla.kernel.org/show_bug.cgi?id=32082

"During mount, when we fail to open journal inode or root inode, the
__save_error_info will mod_timer. But actually s_err_report isn't
initialized yet and the kernel oops."

Thanks,

-Kees

-- 
Kees Cook
Ubuntu Security Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.