oss-security - CVE Request: Linux kernel: panic while pushing pending data out of an IPv6 socket with UDP

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <alpine.LFD.2.03.1307240031140.938@erqung.pbz>
Date: Wed, 24 Jul 2013 00:48:02 +0530 (IST)
From: P J P <ppandit@...hat.com>
To: oss security list <oss-security@...ts.openwall.com>
Subject: CVE Request: Linux kernel: panic while pushing pending data out of
 an IPv6 socket with UDP_CORK enabled.

   Hi,

Linux kernel built with IPv6 networking is vulnerable to a crash while sending 
data as a single datagram over IPv6 socket when UDP_CORK option set. UDP_CORK 
enables accumulating data and sending it as a single datagram.

Upstream fix:
-------------
  -> https://git.kernel.org/linus/8822b64a0fa64a5dd1dfcf837c5b0be83f8c05d1

Reference:
----------
  -> https://bugzilla.redhat.com/show_bug.cgi?id=987627

Acknowledgement:
-----------------
Red Hat would like to thank Hannes Frederic Sowa for reporting this issue.

Thank you!
--
Prasad J Pandit / Red Hat Security Response Team
DB7A 84C5 D3F9 7CD1 B5EB  C939 D048 7860 3655 602B

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.