[prev in list] [next in list] [prev in thread] [next in thread]
List: oss-security
Subject: Re: [oss-security] CVE-2009-4272 kernel: emergency route cache flushing
From: Eugene Teo <eugeneteo () kernel ! sg>
Date: 2010-01-20 9:01:40
Message-ID: 4B56C674.6050209 () kernel ! sg
[Download RAW message or body]
On 01/20/2010 10:37 AM, Eugene Teo wrote:
> Reported by the Parallels Virtuozzo Containers team.
>
> If an attacker was able to cause a large enough number of collisions in
> the routing hash table (via specially-crafted packets) for the emergency
> route flush to trigger, a deadlock could occur, or if the kernel routing
> cache was disabled, an uninitialized pointer would be left behind after
> a route lookup, leading to a NULL pointer dereference. Both caused by
> the same issue.
>
> Introduced via:
> c6153b5b77650879d78dec76414213c76dd8d574 v2.6.27-rc4~39^2~41
> 1080d709fb9d8cd4392f93476ee46a9d6ea05a5b v2.6.29-rc1~581^2~973
>
> Patches:
> https://bugzilla.redhat.com/show_bug.cgi?id=545411#c6
^^
http://git.kernel.org/linus/73e42897
http://git.kernel.org/linus/b6280b47
> https://bugzilla.redhat.com/show_bug.cgi?id=545411#c15
I have also fixed the permissions of the file attachments.
Thanks, Eugene
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic