oss-security - CVE Request -- kernel: futex: clear robust

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Wed, 4 Jan 2012 23:10:59 +0100
From: Petr Matousek <pmatouse@...hat.com>
To: oss-security@...ts.openwall.com
Subject: CVE Request -- kernel: futex: clear robust_list on execve

Move "exit_robust_list" into mm_release() and clear them

We don't want to get rid of the futexes just at exit() time, we want to
drop them when doing an execve() too, since that gets rid of the
previous VM image too.

Doing it at mm_release() time means that we automatically always do it
when we disassociate a VM map from the task.

Upstream patches:
8141c7f3e7aee618312fa1c15109e1219de784a7
fc6b177dee33365ccb29fe6d2092223cf8d679f9

Reference:
https://bugzilla.redhat.com/show_bug.cgi?id=771764

-- 
Petr Matousek / Red Hat Security Response Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.