Date: Wed, 16 Feb 2011 16:31:29 +0800 From: Eugene Teo <eugene@...hat.com> To: oss-security@...ts.openwall.com CC: "Steven M. Christey" <coley@...us.mitre.org> Subject: CVE request - kernel: bridge br_multicast NULL pointer dereference "Somewhere along the line the NULL check in br_mdb_ip_get went AWOL, causing crashes when we receive an IGMP packet with no multicast table allocated. This patch restores it and ensures all br_mdb_*_get functions use it." http://git.kernel.org/linus/7f285fa78d4b81b8458f05e77fb6b46245121b4e Did a quick check: net/bridge/br_multicast.c was introduced in eb1d1641 (2.6.34-rc1), the check was removed in 8ef2a9a5 (v2.6.35-rc1), and subsequently restored in 7f285fa78d (v2.6.35-rc5). Thanks, Eugene
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.