oss-security - CVE-2008-4307 kernel: local denial of service in locks_remove

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <28fa9c5e0901130323gfe2af4et508bda2eb95ab263@mail.gmail.com>
Date: Tue, 13 Jan 2009 19:23:59 +0800
From: "Eugene Teo" <eugeneteo@...nel.sg>
To: oss-security@...ts.openwall.com
Cc: "Steven M. Christey" <coley@...us.mitre.org>
Subject: CVE-2008-4307 kernel: local denial of service in locks_remove_flock

There is a fcntl/close race in the Linux kernel that can be abused by
a local, unprivileged user to cause a denial of service.

The issue was fixed in upstream commit c4d7c402b788b73dc24f1e54a57f89d3dc5eb7bc.

More details can be found at:
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-4307

Thanks, Eugene

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.