Date: Tue, 16 Aug 2011 09:08:22 +0800 From: Eugene Teo <eugene@...hat.com> To: oss-security@...ts.openwall.com, coley@...us.mitre.org Subject: Re: CVE request -- kernel: perf: fix software event overflow On 08/15/2011 09:43 PM, Petr Matousek wrote: > Hello Steve, vendors. > > Description: > Under certain circumstances software event overflows go wrong and > deadlock. Avoid trying to delete a timer from the timer callback. > > References: > https://bugzilla.redhat.com/show_bug.cgi?id=730706 > https://lkml.org/lkml/2011/7/27/337 (reproducer) > https://lkml.org/lkml/2011/7/28/284 (fix) > > Upstream fix: > a8b0ca17b80e92faab46ee7179ba9e99ccb61233 (much larger patch that > contains the hunk referenced above) Use CVE-2011-2918. Thanks, Eugene
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.