[kernel-sec-discuss] r1533 - active

[Michael Gilbert]

Author: gilbert-guest
Date: 2009-10-20 21:56:39 +0000 (Tue, 20 Oct 2009)
New Revision: 1533

Added:
   active/CVE-2009-3612
Log:
new issue (similar to other tc issue)

Added: active/CVE-2009-3612
===================================================================
--- active/CVE-2009-3612	                        (rev 0)
+++ active/CVE-2009-3612	2009-10-20 21:56:39 UTC (rev 1533)
@@ -0,0 +1,17 @@
+Candidate: CVE-2009-3612
+Description:
+ The tcf_fill_node function in net/sched/cls_api.c in the netlink subsystem in the 
+ Linux kernel 2.6.x before 2.6.32-rc5, and 2.4.37.6 and earlier, does not initialize 
+ a certain tcm__pad2 structure member, which might allow local users to obtain 
+ sensitive information from kernel memory via unspecified vectors. NOTE: this issue 
+ exists because of an incomplete fix for CVE-2005-4881.
+References:
+ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3612
+ http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ad61df918c44316940404891d5082c63e79c256a
+Notes:
+Bugs:
+upstream: released (2.6.32-5) [ad61df918c44316940404891d5082c63e79c256a]
+linux-2.6: needed
+2.6.18-etch-security: needed
+2.6.24-etch-security: needed
+2.6.26-lenny-security: needed