oss-security - CVE request -- Linux kernel: mm/hotplug: failure in propagating hot-added memory to other nodes

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Sat, 10 Nov 2012 22:36:59 +0100
From: Petr Matousek <pmatouse@...hat.com>
To: oss-security@...ts.openwall.com
Subject: CVE request -- Linux kernel: mm/hotplug: failure in propagating
 hot-added memory to other nodes

A NULL pointer dereference flaw has been found in the way a new node's
hot-added memory is propagated to other nodes zonelists. An unprivileged
local user can use this flaw to crash the system.

Upstream fix:
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=08dff7b7d629807dbb1f398c68dd9cd58dd657a1

References:
https://bugzilla.redhat.com/show_bug.cgi?id=875374

Thanks,
-- 
Petr Matousek / Red Hat Security Response Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.