[kernel-sec-discuss] r1166 - active

[keescook-guest at alioth.debian.org]

Author: keescook-guest
Date: 2008-05-09 22:17:25 +0000 (Fri, 09 May 2008)
New Revision: 1166

Added:
   active/CVE-2007-6712
Log:
hrtimer overflows

Added: active/CVE-2007-6712
===================================================================
--- active/CVE-2007-6712	                        (rev 0)
+++ active/CVE-2007-6712	2008-05-09 22:17:25 UTC (rev 1166)
@@ -0,0 +1,19 @@
+Candidate: CVE-2007-6712
+Description: 
+ Integer overflow in the hrtimer_forward function (hrtimer.c) in Linux
+ kernel 2.6.21-rc4, when running on 64-bit systems, allows local users to
+ cause a denial of service (infinite loop) via a timer with a large expiry
+ value, which causes the timer to always be expired.
+References: 
+ http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=5a7780e725d1bb4c3094fcc12f1c5c5faea1e988
+Ubuntu-Description: 
+Notes: 
+Bugs: 
+upstream: 
+linux-2.6: 
+2.6.18-etch-security: 
+2.6.24-etchnhalf-security:
+2.6.15-dapper-security: N/A
+2.6.20-feisty-security: pending (2.6.20-16.36)
+2.6.22-gutsy-security: pending (2.6.22-14.53)
+2.6.24-hardy-security: N/A