oss-security - CVE request - kernel: bridge br_multicast NULL pointer dereference

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <4D5B8B61.5020602@redhat.com>
Date: Wed, 16 Feb 2011 16:31:29 +0800
From: Eugene Teo <eugene@...hat.com>
To: oss-security@...ts.openwall.com
CC: "Steven M. Christey" <coley@...us.mitre.org>
Subject: CVE request - kernel: bridge br_multicast NULL pointer dereference

"Somewhere along the line the NULL check in br_mdb_ip_get went AWOL, 
causing crashes when we receive an IGMP packet with no multicast table 
allocated.

This patch restores it and ensures all br_mdb_*_get functions use it."

http://git.kernel.org/linus/7f285fa78d4b81b8458f05e77fb6b46245121b4e

Did a quick check: net/bridge/br_multicast.c was introduced in eb1d1641 
(2.6.34-rc1), the check was removed in 8ef2a9a5 (v2.6.35-rc1), and 
subsequently restored in 7f285fa78d (v2.6.35-rc5).

Thanks, Eugene

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.