oss-security - CVE Request: Linux: Remote crash via batman-adv module

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Wed, 31 Dec 2014 17:14:15 +0100
From: Salvatore Bonaccorso <carnil@...ian.org>
To: OSS Security Mailinglist <oss-security@...ts.openwall.com>
Cc: CVE Assignments MITRE <cve-assign@...re.org>
Subject: CVE Request: Linux: Remote crash via batman-adv module

Hi

It was reported on the netdev mailing list[1] and in the Debian
bugtracker[2] that linux could crash when using the batman-adv module,
see also [3]. The bug was introduced in [4], in 3.13-rc1, and a fix
recently merged in [5] (sheduled for 3.19).

Could you please assign a CVE for this issue?

References:

 [1] http://thread.gmane.org/gmane.linux.network/343494
 [2] https://bugs.debian.org/774155
 [3] https://lists.open-mesh.org/pipermail/b.a.t.m.a.n/2014-November/012561.html
 [4] https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=610bfc6bc99bc83680d190ebc69359a05fc7f605 (v3.13-rc1)
 [5] https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5b6698b0e4a37053de35cc24ee695b98a7eb712b

Regards,
Salvatore

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.