Date: Tue, 13 Oct 2020 10:23:52 -0700 From: Steve Beattie <steve.beattie@...onical.com> To: oss-security@...ts.openwall.com Subject: CVE-2020-16119 - Linux kernel DCCP CCID structure use-after-free Hello, CVE-2020-16119 - Linux kernel DCCP CCID structure use-after-free Hadar Manor reported that by reusing a DCCP socket with an attached dccps_hc_tx_ccid as a listener, it will be used after being released, leading to a denial of service or possibly code execution. It was introduced by: 2677d20677314101293e6da0094ede7b5526d2b1 "dccp: don't free ccid2_hc_tx_sock struct in dccp_disconnect()" Proposed fixes have been posted to: https://firstname.lastname@example.org/T/ To mitigate this on systems that have DCCP enabled but do not use it, block module autoloading via adding the following to /etc/modprobe.d/blacklist-dccp.conf: alias net-pf-2-proto-0-type-6 off alias net-pf-2-proto-33-type-6 off alias net-pf-10-proto-0-type-6 off alias net-pf-10-proto-33-type-6 off Alternatively, to prevent the dccp module from being loaded entirely, add: blacklist dccp install dccp /bin/false Thanks. -- Steve Beattie <sbeattie@...ntu.com> Download attachment "signature.asc" of type "application/pgp-signature" (834 bytes)
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.