oss-security - CVE-2016-0617: linux kernel: hugetlbfs: fix bugs in hugetlb_vmtruncate

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [day] [month] [year] [list]

Date: Mon, 8 Feb 2016 16:45:17 +0000
From: John Haxby <john.haxby@...cle.com>
To: oss-security@...ts.openwall.com
Subject: CVE-2016-0617: linux kernel: hugetlbfs: fix bugs in
 hugetlb_vmtruncate_list()

Hello All,

There was a bug in the linux kernel's hugetlbfs handling of punching
holes in huegtlbfs files with either truncate or fallocate.  The problem
was introduced in 1bfad99ab (" hugetlbfs: hugetlb_vmtruncate_list()
needs to take a range", 4.3-rc1) and, I think, fixed in 9aacdd354d19
("fs/hugetlbfs/inode.c: fix bugs in hugetlb_vmtruncate_list(), 4.5-rc1).

This issue was assigned CVE-2016-0617.

jch

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.