[<prev] [next>] [day] [month] [year] [list]
Date: Tue, 23 Mar 2010 10:37:13 +0800
From: Eugene Teo <eugeneteo@...nel.sg>
To: oss-security@...ts.openwall.com
CC: coley@...us.mitre.org
Subject: CVE request: kernel: bluetooth: potential bad memory access with
sysfs files
When creating a high number of Bluetooth sockets (L2CAP, SCO and RFCOMM)
it is possible to scribble repeatedly on arbitrary pages of memory.
Ensure that the content of these sysfs files is always less than one
page. Even if this means truncating. The files in question are scheduled
to be moved over to debugfs in the future anyway.
Upstream patch:
http://git.kernel.org/linus/101545f6fef4a0a3ea8daf0b5b880df2c6a92a69
https://bugzilla.redhat.com/show_bug.cgi?id=576018
Thanks, Eugene
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
