[kernel-sec-discuss] r1554 - retired

[Michael Gilbert]

Author: gilbert-guest
Date: 2009-10-28 22:07:14 +0000 (Wed, 28 Oct 2009)
New Revision: 1554

Added:
   retired/CVE-2004-1191
Log:
put retired issue into retired folder

Added: retired/CVE-2004-1191
===================================================================
--- retired/CVE-2004-1191	                        (rev 0)
+++ retired/CVE-2004-1191	2009-10-28 22:07:14 UTC (rev 1554)
@@ -0,0 +1,21 @@
+Candidate: CVE-2004-1191
+Description:
+ Race condition in SuSE Linux 8.1 through 9.2, when run on SMP systems that have more
+ than 4GB of memory, could allow local users to read unauthorized memory from
+ "foreign memory pages."
+References:
+ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1191
+ http://www.novell.com/linux/security/advisories/2004_42_kernel.html
+ http://xforce.iss.net/xforce/xfdb/18137
+Notes:
+ the secure-testing tracker indicates that this was fixed appropriately in all of the
+ linux-2.4 kernels released at the time; however, it also says that linux-2.6 needs
+ to be checked, which was never done.
+ - retiring based on the assumption that it was fixed in sarge's 2.6.8, and that
+   hopefully during that timeframe patches were pushed upstream
+Bugs:
+upstream: ignored "unable to find info about defect"
+linux-2.6: ignored "unable to find info about defect"
+2.6.18-etch-security: ignored "unable to find info about defect"
+2.6.24-etch-security: ignored "unable to find info about defect"
+2.6.26-lenny-security: ignored "unable to find info about defect"