oss-security - Re: Linux kernel av7110 negative array offset

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <4D3E3D23.3080805@redhat.com>
Date: Tue, 25 Jan 2011 11:01:55 +0800
From: Eugene Teo <eugene@...hat.com>
To: oss-security@...ts.openwall.com
CC: Kees Cook <kees@...ntu.com>, Dan Carpenter <error27@...il.com>,
        Mauro Carvalho Chehab <mchehab@...hat.com>
Subject: Re: Linux kernel av7110 negative array offset

On 01/25/2011 01:13 AM, Kees Cook wrote:
> Hi,
>
> Tavis Ormandy pointed this[1] out to me today. Has this already been
> assigned a CVE? It looks exploitable if someone has this hardware in their
> system.

Please use CVE-2011-0521.

Thanks, Eugene

> Thanks,
>
> -Kees
>
> [1] http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=cb26a24ee9706473f31d34cc259f4dcf45cd0644
>

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.