[kernel-sec-discuss] r1401 - active

[Moritz Muehlenhoff]

Author: jmm
Date: 2009-06-06 20:03:35 +0000 (Sat, 06 Jun 2009)
New Revision: 1401

Added:
   active/CVE-2009-1914
Log:
new sparc issue


Added: active/CVE-2009-1914
===================================================================
--- active/CVE-2009-1914	                        (rev 0)
+++ active/CVE-2009-1914	2009-06-06 20:03:35 UTC (rev 1401)
@@ -0,0 +1,23 @@
+Candidate: CVE-2009-1914
+Description:
+ The pci_register_iommu_region function in
+ arch/sparc/kernel/pci_common.c in the Linux kernel before 2.6.29 on
+ the sparc64 platform allows local users to cause a denial of service
+ (system crash) by reading the /proc/iomem file, related to
+ uninitialized pointers and the request_resource function.
+References:
+ http://www.openwall.com/lists/oss-security/2009/06/03/3
+ http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=192d7a4667c6d11d1a174ec4cad9a3c5d5f9043c
+ http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29
+Ubuntu-Description:
+Notes:
+Bugs:
+upstream: released (2.6.29)
+linux-2.6: released (2.6.29-1)
+2.6.18-etch-security:
+2.6.24-etch-security:
+2.6.26-lenny-security:
+2.6.15-dapper-security:
+2.6.22-gutsy-security:
+2.6.24-hardy-security:
+2.6.27-intrepid-security: