[kernel-sec-discuss] r1454 - active

[Michael Gilbert]

Author: gilbert-guest
Date: 2009-08-14 20:40:56 +0000 (Fri, 14 Aug 2009)
New Revision: 1454

Added:
   active/CVE-2009-load_flat_shared_library-null-ptr-dereference
Log:
new issue


Added: active/CVE-2009-load_flat_shared_library-null-ptr-dereference
===================================================================
--- active/CVE-2009-load_flat_shared_library-null-ptr-dereference	                        (rev 0)
+++ active/CVE-2009-load_flat_shared_library-null-ptr-dereference	2009-08-14 20:40:56 UTC (rev 1454)
@@ -0,0 +1,19 @@
+Candidate:
+Description:
+ The new credentials code broke load_flat_shared_library() as it now uses an
+ uninitialized cred pointer, leading to a NULL pointer dereference.
+References:
+ http://lkml.org/lkml/2009/6/22/91
+ http://thread.gmane.org/gmane.linux.hardware.blackfin.kernel.devel/1905
+Ubuntu-Description:
+Notes:
+Bugs:
+upstream: pending (2.6.31) [3440625d78711bee41a84cf29c3d8c579b522666]
+linux-2.6:
+2.6.18-etch-security:
+2.6.24-etch-security:
+2.6.26-lenny-security:
+2.6.15-dapper-security:
+2.6.22-gutsy-security:
+2.6.24-hardy-security:
+2.6.27-intrepid-security: