[Secure-testing-team] Bug#537409: linux-image-2.6.30-1-amd64: 2.6.30+/RHEL5 2.6.18 local kernel exploit in /dev/net/tun

Yuriy Kolesnikov yurikoles at gmail.com
Fri Jul 17 23:46:57 UTC 2009


Package: linux-image-2.6.30-1-amd64
Version: 2.6.30-2
Severity: critical
Tags: security patch
Justification: root security hole

From: Mariusz Kozlowski <m.kozlowski at tuxland.pl>
Date: Sun, 5 Jul 2009 19:48:35 +0000 (+0000)
Subject: tun/tap: Fix crashes if open() /dev/net/tun and then poll() it.
X-Git-Tag: v2.6.31-rc3~40^2~15
X-Git-Url: http://git.kernel.org/?p=linux%2Fkernel%2Fgit%2Ftorvalds%2Flinux-2.6.git;a=commitdiff_plain;h=3c8a9c63d5fd738c261bd0ceece04d9c8357ca13

tun/tap: Fix crashes if open() /dev/net/tun and then poll() it.

Fix NULL pointer dereference in tun_chr_pool() introduced by commit
33dccbb050bbe35b88ca8cf1228dcf3e4d4b3554 ("tun: Limit amount of queued
packets per device") and triggered by this code:

	int fd;
	struct pollfd pfd;
	fd = open("/dev/net/tun", O_RDWR);
	pfd.fd = fd;
	pfd.events = POLLIN | POLLOUT;
	poll(&pfd, 1, 0);

Reported-by: Eugene Kapun <abacabadabacaba at gmail.com>
Signed-off-by: Mariusz Kozlowski <m.kozlowski at tuxland.pl>
Signed-off-by: David S. Miller <davem at davemloft.net>
---

diff --git a/drivers/net/tun.c b/drivers/net/tun.c
index b393536..027f7ab 100644
--- a/drivers/net/tun.c
+++ b/drivers/net/tun.c
@@ -486,12 +486,14 @@ static unsigned int tun_chr_poll(struct file *file, poll_table * wait)
 {
 	struct tun_file *tfile = file->private_data;
 	struct tun_struct *tun = __tun_get(tfile);
-	struct sock *sk = tun->sk;
+	struct sock *sk;
 	unsigned int mask = 0;
 
 	if (!tun)
 		return POLLERR;
 
+	sk = tun->sk;
+
 	DBG(KERN_INFO "%s: tun_chr_poll\n", tun->dev->name);
 
 	poll_wait(file, &tun->socket.wait, wait);

-- Package-specific info:
** Version:
Linux version 2.6.30-1-amd64 (Debian 2.6.30-2) (waldi at debian.org) (gcc version 4.3.3 (Debian 4.3.3-13) ) #1 SMP Wed Jul 8 12:20:34 UTC 2009

** Command line:
BOOT_IMAGE=/boot/vmlinuz-2.6.30-1-amd64 root=UUID=e94b960f-555b-4261-aa39-4c602a8f2e43 ro quiet

** Tainted: P (1)

** Kernel log:
[   14.058566] loop: module loaded
[   18.635583] JBD: barrier-based sync failed on hdb1:8 - disabling barriers
[   19.294040] fuse init (API version 7.11)
[   19.530017] EXT4-fs: barriers enabled
[   19.530186] kjournald2 starting: pid 2337, dev sda1:8, commit interval 5 seconds
[   19.530401] EXT4 FS on sda1, internal journal on sda1:8
[   19.530403] EXT4-fs: delayed allocation enabled
[   19.530405] EXT4-fs: file extents enabled
[   19.530568] EXT4-fs: mballoc enabled
[   19.530585] EXT4-fs: mounted filesystem sda1 with ordered data mode
[   25.034176] PPP generic driver version 2.4.2
[   28.813064] powernow-k8: Found 1 AMD Athlon(tm) 64 Processor 3200+ processors (1 cpu cores) (version 2.20.00)
[   28.813112] powernow-k8:    0 : fid 0xc (2000 MHz), vid 0x6
[   28.813115] powernow-k8:    1 : fid 0xa (1800 MHz), vid 0x8
[   28.813118] powernow-k8:    2 : fid 0x2 (1000 MHz), vid 0x12
[   29.184037] Clocksource tsc unstable (delta = -176037036 ns)
[   33.676019] eth1: no IPv6 routers present
[   67.199568] RPC: Registered udp transport module.
[   67.199574] RPC: Registered tcp transport module.
[   67.384685] Installing knfsd (copyright (C) 1996 okir at monad.swb.de).
[   67.473538] svc: failed to register lockdv1 RPC service (errno 97).
[   67.474510] NFSD: Using /var/lib/nfs/v4recovery as the NFSv4 state recovery directory
[   67.488044] NFSD: starting 90-second grace period
[   75.152662] vboxdrv: Trying to deactivate the NMI watchdog permanently...
[   75.152668] vboxdrv: Successfully done.
[   75.152673] vboxdrv: Found 1 processor cores.
[   75.152753] VBoxDrv: dbg - g_abExecMemory=ffffffffa0457820
[   75.152842] vboxdrv: TSC mode is 'synchronous', kernel timer mode is 'normal'.
[   75.152847] vboxdrv: Successfully loaded version 3.0.2 (interface 0x000e0000).
[   75.499937] VBoxNetFlt: dbg - g_abExecMemory=ffffffffa05f34c0
[   75.533604] VBoxNetAdp: dbg - g_abExecMemory=ffffffffa060a120
[   83.259461] Bluetooth: Core ver 2.15
[   83.261352] NET: Registered protocol family 31
[   83.261355] Bluetooth: HCI device and connection manager initialized
[   83.261359] Bluetooth: HCI socket layer initialized
[   83.317293] Bluetooth: L2CAP ver 2.13
[   83.317298] Bluetooth: L2CAP socket layer initialized
[   83.424460] Bluetooth: RFCOMM socket layer initialized
[   83.424479] Bluetooth: RFCOMM TTY layer initialized
[   83.424484] Bluetooth: RFCOMM ver 1.11
[   87.900431] eth0: link down
[   87.900920] ADDRCONF(NETDEV_UP): eth0: link is not ready
[   91.678113] lp0: using parport0 (interrupt-driven).
[   91.698589] ppdev: user-space parallel port driver
[  100.017783] /dev/vmmon[5396]: Module vmmon: registered with major=10 minor=165
[  100.017795] /dev/vmmon[5396]: Initial HV check: anyNotCapable=1 anyUnlocked=0 anyEnabled=0 anyDisabled=0
[  100.017799] /dev/vmmon[5396]: Module vmmon: initialized
[  100.208503] /dev/vmci[5408]: VMCI: Driver initialized.
[  100.208581] /dev/vmci[5408]: Module vmci: registered with major=10 minor=56
[  100.208588] /dev/vmci[5408]: Module vmci: initialized
[  100.696212] /dev/vmnet: open called by PID 5466 (vmnet-bridge)
[  100.696223] /dev/vmnet: hub 0 does not exist, allocating memory.
[  100.696239] /dev/vmnet: port on hub 0 successfully opened
[  100.696253] bridge-eth1: up
[  100.696257] bridge-eth1: attached
[  100.945479] /dev/vmnet: open called by PID 5477 (vmnet-dhcpd)
[  100.945495] /dev/vmnet: hub 1 does not exist, allocating memory.
[  100.945531] /dev/vmnet: port on hub 1 successfully opened
[  101.090780] /dev/vmnet: open called by PID 5510 (vmnet-dhcpd)
[  101.090798] /dev/vmnet: hub 8 does not exist, allocating memory.
[  101.090833] /dev/vmnet: port on hub 8 successfully opened
[  101.199041] /dev/vmnet: open called by PID 5519 (vmnet-natd)
[  101.199063] /dev/vmnet: port on hub 8 successfully opened
[ 2854.763611] UDF-fs: No VRS found
[ 2854.763618] UDF-fs: No partition found (1)
[ 2855.046897] ISO 9660 Extensions: Microsoft Joliet Level 3
[ 2855.397214] ISO 9660 Extensions: RRIP_1991A
[ 4145.442452] nvidia: module license 'NVIDIA' taints kernel.
[ 4145.442460] Disabling lock debugging due to kernel taint
[ 4145.717271] ACPI: PCI Interrupt Link [APC3] enabled at IRQ 18
[ 4145.717277]   alloc irq_desc for 18 on cpu 0 node 0
[ 4145.717280]   alloc kstat_irqs on cpu 0 node 0
[ 4145.717290] nvidia 0000:01:00.0: PCI INT A -> Link[APC3] -> GSI 18 (level, low) -> IRQ 18
[ 4145.717297] nvidia 0000:01:00.0: setting latency timer to 64
[ 4145.717583] NVRM: loading NVIDIA UNIX x86_64 Kernel Module  185.18.14  Wed May 27 01:23:47 PDT 2009
[ 4242.179797] nvidia 0000:01:00.0: setting latency timer to 64
[ 4242.180382] NVRM: loading NVIDIA UNIX x86_64 Kernel Module  185.18.14  Wed May 27 01:23:47 PDT 2009
[ 4423.473576] UDF-fs: No VRS found
[ 4423.473582] UDF-fs: No partition found (1)
[ 4423.548697] ISO 9660 Extensions: Microsoft Joliet Level 3
[ 4423.872440] ISO 9660 Extensions: RRIP_1991A
[ 7296.453723] Intel AES-NI instructions are not detected.
[14590.185570] operapluginwrap[16843]: segfault at 58 ip 00007f5923e6e683 sp 00007fff6db6f340 error 4 in libflashplayer.so[7f5923de1000+8cb000]
[15224.903834] operapluginwrap[23140] trap stack segment ip:7fdf7505407e sp:7fff3d10eff0 error:0
[15519.379818] operapluginwrap[24609]: segfault at d07c00b ip 00007f3bd2d7a07e sp 00007fffa894a700 error 4 in libgobject-2.0.so.0.2000.1[7f3bd2d4f000+44000]
[17436.040960] operapluginwrap[25429]: segfault at d7d5d3 ip 00007fcfebd21058 sp 00007fff412d1390 error 4 in libgobject-2.0.so.0.2000.1[7fcfebcf6000+44000]
[17661.774369] operapluginwrap[30918]: segfault at 6000093 ip 00007f94c5f2207e sp 00007fff2693de30 error 4 in libgobject-2.0.so.0.2000.1[7f94c5ef7000+44000]
[18015.248653] operapluginwrap[31730]: segfault at 2000073 ip 00007fa008bf307e sp 00007fffaea9cb60 error 4 in libgobject-2.0.so.0.2000.1[7fa008bc8000+44000]
[18225.909910] operapluginwrap[32379]: segfault at 3000073 ip 00007f8835b2907e sp 00007ffff2a5cfd0 error 4 in libgobject-2.0.so.0.2000.1[7f8835afe000+44000]
[18647.601441] operapluginwrap[11524]: segfault at 7f9f633b7e10 ip 00007f9f633b7e10 sp 00007fff5ef54568 error 14 in libclearlooks.so[7f9f63eac000+29000]
[19315.402018] UDF-fs: No VRS found
[19315.402025] UDF-fs: No partition found (1)
[19315.643564] ISO 9660 Extensions: Microsoft Joliet Level 3
[19315.954436] ISO 9660 Extensions: RRIP_1991A
[21497.465009] operapluginwrap[7962]: segfault at 7feb7fffffb0 ip 00007febd7d5c058 sp 00007fff2a301840 error 4 in libgobject-2.0.so.0.2000.1[7febd7d31000+44000]
[26553.906070] operapluginwrap[27770]: segfault at 30 ip 00007f28d3791058 sp 00007fff057e05d0 error 4 in libgobject-2.0.so.0.2000.1[7f28d3766000+44000]
[47561.089401] UDF-fs: No VRS found
[47561.089408] UDF-fs: No partition found (1)
[47561.204901] ISO 9660 Extensions: Microsoft Joliet Level 3
[47561.515849] ISO 9660 Extensions: RRIP_1991A

** Loaded modules:
Module                  Size  Used by
cryptd                  7352  0 
aes_x86_64              8928  2 
aes_generic            27840  1 aes_x86_64
xts                     3440  1 
gf128mul                8704  1 xts
dm_crypt               12952  1 
snd_seq_dummy           3188  0 
nvidia              10258216  26 
nls_utf8                2000  1 
isofs                  31096  1 
udf                    72264  0 
crc_itu_t               2720  1 udf
vmnet                  39084  9 
vmci                   48248  0 
vmmon                  65728  0 
binfmt_misc             9260  1 
ppdev                   7800  0 
lp                     10612  0 
rfcomm                 35920  2 
l2cap                  21136  9 rfcomm
bluetooth              54932  4 rfcomm,l2cap
vboxnetadp             82908  0 
vboxnetflt             89196  0 
vboxdrv              1693292  1 vboxnetflt
nfsd                  268688  9 
lockd                  68100  1 nfsd
nfs_acl                 3264  1 nfsd
auth_rpcgss            40848  1 nfsd
sunrpc                196728  8 nfsd,lockd,nfs_acl,auth_rpcgss
exportfs                4640  1 nfsd
battery                 7840  0 
autofs4                25752  0 
powernow_k8            14068  0 
cpufreq_conservative     7928  0 
cpufreq_powersave       1792  0 
cpufreq_userspace       3636  0 
cpufreq_stats           4660  0 
ppp_async               9088  1 
crc_ccitt               2336  1 ppp_async
ppp_generic            25640  5 ppp_async
slhc                    5696  1 ppp_generic
vfat                   10528  0 
fat                    48360  1 vfat
nls_base                8740  5 nls_utf8,isofs,udf,vfat,fat
fuse                   54656  11 
loop                   15964  2 
serio_raw               5844  0 
k8temp                  5152  0 
psmouse                42156  0 
ns558                   5248  0 
i2c_nforce2             7864  0 
gameport               12608  2 ns558
i2c_core               25424  2 nvidia,i2c_nforce2
pcspkr                  2800  0 
evdev                  10448  6 
asus_atk0110            7744  0 
snd_intel8x0           32824  9 
snd_mpu401              7896  0 
snd_mpu401_uart         7552  1 snd_mpu401
snd_ac97_codec        113960  1 snd_intel8x0
ac97_bus                2080  1 snd_ac97_codec
snd_seq_midi            6976  0 
snd_pcm_oss            37200  0 
snd_rawmidi            22992  2 snd_mpu401_uart,snd_seq_midi
snd_mixer_oss          15072  2 snd_pcm_oss
snd_seq_midi_event      7696  1 snd_seq_midi
snd_pcm                78440  5 snd_intel8x0,snd_ac97_codec,snd_pcm_oss
snd_seq                51312  3 snd_seq_dummy,snd_seq_midi,snd_seq_midi_event
processor              40112  1 powernow_k8
snd_timer              21824  4 snd_pcm,snd_seq
snd_page_alloc          9968  2 snd_intel8x0,snd_pcm
snd_seq_device          7476  4 snd_seq_dummy,snd_seq_midi,snd_rawmidi,snd_seq
button                  6512  0 
parport_pc             27080  1 
parport                38224  3 ppdev,lp,parport_pc
snd                    63864  23 snd_intel8x0,snd_mpu401,snd_mpu401_uart,snd_ac97_codec,snd_pcm_oss,snd_rawmidi,snd_mixer_oss,snd_pcm,snd_seq,snd_timer,snd_seq_device
soundcore               7984  2 snd
ext4                  215984  2 
mbcache                 8804  1 ext4
jbd2                   58768  1 ext4
crc16                   2272  1 ext4
dm_mirror              14520  0 
dm_region_hash         12704  1 dm_mirror
dm_log                  9924  2 dm_mirror,dm_region_hash
dm_snapshot            22604  0 
dm_mod                 59192  6 dm_crypt,dm_mirror,dm_log,dm_snapshot
sd_mod                 33688  5 
crc_t10dif              2096  1 sd_mod
ide_gd_mod             23400  3 
ide_cd_mod             29032  1 
cdrom                  34360  1 ide_cd_mod
ide_pci_generic         4964  0 
ata_generic             5924  0 
sata_nv                24872  5 
8139too                25588  0 
8139cp                 20896  0 
mii                     5600  2 8139too,8139cp
amd74xx                 6872  4 
libata                175004  2 ata_generic,sata_nv
forcedeth              52636  0 
scsi_mod              158464  2 sd_mod,libata
ohci_hcd               22748  0 
ide_core              104992  4 ide_gd_mod,ide_cd_mod,ide_pci_generic,amd74xx
ehci_hcd               33676  0 
floppy                 55384  0 
thermal                15952  0 
fan                     5224  0 
thermal_sys            16496  3 processor,thermal,fan

** PCI devices:
00:00.0 Memory controller [0580]: nVidia Corporation CK804 Memory Controller [10de:005e] (rev a3)
	Subsystem: ASUSTeK Computer Inc. A8N-E Mainboard [1043:815a]
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz+ UDF- FastB2B+ ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0
	Capabilities: <access denied>

00:01.0 ISA bridge [0601]: nVidia Corporation CK804 ISA Bridge [10de:0050] (rev a3)
	Subsystem: ASUSTeK Computer Inc. K8N4-E or A8N-E Mainboard [1043:815a]
	Control: I/O+ Mem+ BusMaster+ SpecCycle+ MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap- 66MHz+ UDF- FastB2B+ ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0

00:01.1 SMBus [0c05]: nVidia Corporation CK804 SMBus [10de:0052] (rev a2)
	Subsystem: ASUSTeK Computer Inc. K8N4-E or A8N-E Mainboard [1043:815a]
	Control: I/O+ Mem- BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz+ UDF- FastB2B+ ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Interrupt: pin A routed to IRQ 255
	Region 0: I/O ports at e400 [size=32]
	Region 4: I/O ports at 4c00 [size=64]
	Region 5: I/O ports at 4c40 [size=64]
	Capabilities: <access denied>
	Kernel driver in use: nForce2_smbus

00:02.0 USB Controller [0c03]: nVidia Corporation CK804 USB Controller [10de:005a] (rev a2) (prog-if 10 [OHCI])
	Subsystem: ASUSTeK Computer Inc. K8N4-E or A8N-E Mainboard [1043:815a]
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz+ UDF- FastB2B+ ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0 (750ns min, 250ns max)
	Interrupt: pin A routed to IRQ 22
	Region 0: Memory at d8104000 (32-bit, non-prefetchable) [size=4K]
	Capabilities: <access denied>
	Kernel driver in use: ohci_hcd

00:02.1 USB Controller [0c03]: nVidia Corporation CK804 USB Controller [10de:005b] (rev a3) (prog-if 20 [EHCI])
	Subsystem: ASUSTeK Computer Inc. K8N4-E or A8N-E Mainboard [1043:815a]
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz+ UDF- FastB2B+ ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0 (750ns min, 250ns max)
	Interrupt: pin B routed to IRQ 23
	Region 0: Memory at feb00000 (32-bit, non-prefetchable) [size=256]
	Capabilities: <access denied>
	Kernel driver in use: ehci_hcd

00:04.0 Multimedia audio controller [0401]: nVidia Corporation CK804 AC'97 Audio Controller [10de:0059] (rev a2)
	Subsystem: ASUSTeK Computer Inc. K8N4-E or A8N-E Mainboard [1043:812a]
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz+ UDF- FastB2B+ ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0 (500ns min, 1250ns max)
	Interrupt: pin A routed to IRQ 22
	Region 0: I/O ports at dc00 [size=256]
	Region 1: I/O ports at e000 [size=256]
	Region 2: Memory at d8103000 (32-bit, non-prefetchable) [size=4K]
	Capabilities: <access denied>
	Kernel driver in use: Intel ICH

00:06.0 IDE interface [0101]: nVidia Corporation CK804 IDE [10de:0053] (rev f2) (prog-if 8a [Master SecP PriP])
	Subsystem: ASUSTeK Computer Inc. K8N4-E or A8N-E Mainboard [1043:815a]
	Control: I/O+ Mem- BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz+ UDF- FastB2B+ ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0 (750ns min, 250ns max)
	Region 0: [virtual] Memory at 000001f0 (32-bit, non-prefetchable) [size=8]
	Region 1: [virtual] Memory at 000003f0 (type 3, non-prefetchable) [size=1]
	Region 2: [virtual] Memory at 00000170 (32-bit, non-prefetchable) [size=8]
	Region 3: [virtual] Memory at 00000370 (type 3, non-prefetchable) [size=1]
	Region 4: I/O ports at f000 [size=16]
	Capabilities: <access denied>
	Kernel driver in use: AMD_IDE

00:07.0 IDE interface [0101]: nVidia Corporation CK804 Serial ATA Controller [10de:0054] (rev f3) (prog-if 85 [Master SecO PriO])
	Subsystem: ASUSTeK Computer Inc. A8N-E Mainboard [1043:815a]
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz+ UDF- FastB2B+ ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0 (750ns min, 250ns max)
	Interrupt: pin A routed to IRQ 20
	Region 0: I/O ports at 09f0 [size=8]
	Region 1: I/O ports at 0bf0 [size=4]
	Region 2: I/O ports at 0970 [size=8]
	Region 3: I/O ports at 0b70 [size=4]
	Region 4: I/O ports at d800 [size=16]
	Region 5: Memory at d8102000 (32-bit, non-prefetchable) [size=4K]
	Capabilities: <access denied>
	Kernel driver in use: sata_nv

00:08.0 IDE interface [0101]: nVidia Corporation CK804 Serial ATA Controller [10de:0055] (rev f3) (prog-if 85 [Master SecO PriO])
	Subsystem: ASUSTeK Computer Inc. K8N4-E or A8N-E Mainboard [1043:815a]
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz+ UDF- FastB2B+ ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0 (750ns min, 250ns max)
	Interrupt: pin A routed to IRQ 23
	Region 0: I/O ports at 09e0 [size=8]
	Region 1: I/O ports at 0be0 [size=4]
	Region 2: I/O ports at 0960 [size=8]
	Region 3: I/O ports at 0b60 [size=4]
	Region 4: I/O ports at c400 [size=16]
	Region 5: Memory at d8101000 (32-bit, non-prefetchable) [size=4K]
	Capabilities: <access denied>
	Kernel driver in use: sata_nv

00:09.0 PCI bridge [0604]: nVidia Corporation CK804 PCI Bridge [10de:005c] (rev a2) (prog-if 01 [Subtractive decode])
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR+ FastB2B- DisINTx-
	Status: Cap- 66MHz+ UDF- FastB2B+ ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0
	Bus: primary=00, secondary=05, subordinate=05, sec-latency=128
	I/O behind bridge: 0000a000-0000afff
	Memory behind bridge: d8000000-d80fffff
	Secondary status: 66MHz- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort+ <SERR- <PERR-
	BridgeCtl: Parity- SERR+ NoISA- VGA- MAbort- >Reset- FastB2B-
		PriDiscTmr- SecDiscTmr+ DiscTmrStat- DiscTmrSERREn-

00:0a.0 Bridge [0680]: nVidia Corporation CK804 Ethernet Controller [10de:0057] (rev a3)
	Subsystem: ASUSTeK Computer Inc. K8N4-E or A8N-E Mainboard [1043:8141]
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz+ UDF- FastB2B+ ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx+
	Latency: 0 (250ns min, 5000ns max)
	Interrupt: pin A routed to IRQ 21
	Region 0: Memory at d8100000 (32-bit, non-prefetchable) [size=4K]
	Region 1: I/O ports at b000 [size=8]
	Capabilities: <access denied>
	Kernel driver in use: forcedeth

00:0b.0 PCI bridge [0604]: nVidia Corporation CK804 PCIE Bridge [10de:005d] (rev a3) (prog-if 00 [Normal decode])
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR+ FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0, Cache Line Size: 32 bytes
	Bus: primary=00, secondary=04, subordinate=04, sec-latency=0
	Secondary status: 66MHz- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- <SERR- <PERR-
	BridgeCtl: Parity- SERR+ NoISA- VGA- MAbort- >Reset- FastB2B-
		PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-
	Capabilities: <access denied>
	Kernel driver in use: pcieport-driver

00:0c.0 PCI bridge [0604]: nVidia Corporation CK804 PCIE Bridge [10de:005d] (rev a3) (prog-if 00 [Normal decode])
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR+ FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0, Cache Line Size: 32 bytes
	Bus: primary=00, secondary=03, subordinate=03, sec-latency=0
	Secondary status: 66MHz- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- <SERR- <PERR-
	BridgeCtl: Parity- SERR+ NoISA- VGA- MAbort- >Reset- FastB2B-
		PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-
	Capabilities: <access denied>
	Kernel driver in use: pcieport-driver

00:0d.0 PCI bridge [0604]: nVidia Corporation CK804 PCIE Bridge [10de:005d] (rev a3) (prog-if 00 [Normal decode])
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR+ FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0, Cache Line Size: 32 bytes
	Bus: primary=00, secondary=02, subordinate=02, sec-latency=0
	Secondary status: 66MHz- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- <SERR- <PERR-
	BridgeCtl: Parity- SERR+ NoISA- VGA- MAbort- >Reset- FastB2B-
		PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-
	Capabilities: <access denied>
	Kernel driver in use: pcieport-driver

00:0e.0 PCI bridge [0604]: nVidia Corporation CK804 PCIE Bridge [10de:005d] (rev a3) (prog-if 00 [Normal decode])
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR+ FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0, Cache Line Size: 32 bytes
	Bus: primary=00, secondary=01, subordinate=01, sec-latency=0
	Memory behind bridge: d0000000-d7ffffff
	Prefetchable memory behind bridge: 00000000c0000000-00000000cfffffff
	Secondary status: 66MHz- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort+ <SERR- <PERR-
	BridgeCtl: Parity- SERR+ NoISA- VGA+ MAbort- >Reset- FastB2B-
		PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-
	Capabilities: <access denied>
	Kernel driver in use: pcieport-driver

00:18.0 Host bridge [0600]: Advanced Micro Devices [AMD] K8 [Athlon64/Opteron] HyperTransport Technology Configuration [1022:1100]
	Control: I/O- Mem- BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Capabilities: <access denied>

00:18.1 Host bridge [0600]: Advanced Micro Devices [AMD] K8 [Athlon64/Opteron] Address Map [1022:1101]
	Control: I/O- Mem- BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-

00:18.2 Host bridge [0600]: Advanced Micro Devices [AMD] K8 [Athlon64/Opteron] DRAM Controller [1022:1102]
	Control: I/O- Mem- BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-

00:18.3 Host bridge [0600]: Advanced Micro Devices [AMD] K8 [Athlon64/Opteron] Miscellaneous Control [1022:1103]
	Control: I/O- Mem- BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Kernel driver in use: k8temp

01:00.0 VGA compatible controller [0300]: nVidia Corporation NV43 [GeForce 6600] [10de:0141] (rev a2) (prog-if 00 [VGA controller])
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0
	Interrupt: pin A routed to IRQ 18
	Region 0: Memory at d0000000 (32-bit, non-prefetchable) [size=64M]
	Region 1: Memory at c0000000 (64-bit, prefetchable) [size=256M]
	Region 3: Memory at d4000000 (64-bit, non-prefetchable) [size=16M]
	[virtual] Expansion ROM at d5000000 [disabled] [size=128K]
	Capabilities: <access denied>
	Kernel driver in use: nvidia

05:06.0 Communication controller [0780]: Agere Systems LT WinModem [11c1:044c] (rev 02)
	Subsystem: Agere Systems LT WinModem [11c1:044c]
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 32 (63000ns min, 3500ns max)
	Interrupt: pin A routed to IRQ 255
	Region 0: Memory at d8000000 (32-bit, non-prefetchable) [size=256]
	Region 1: I/O ports at a000 [size=8]
	Region 2: I/O ports at a400 [size=256]
	Capabilities: <access denied>

05:07.0 Ethernet controller [0200]: Realtek Semiconductor Co., Ltd. RTL-8139/8139C/8139C+ [10ec:8139] (rev 10)
	Subsystem: Edimax Computer Co. Device [1432:9503]
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 32 (8000ns min, 16000ns max)
	Interrupt: pin A routed to IRQ 17
	Region 0: I/O ports at a800 [size=256]
	Region 1: Memory at d8001000 (32-bit, non-prefetchable) [size=256]
	Capabilities: <access denied>
	Kernel driver in use: 8139too



-- System Information:
Debian Release: squeeze/sid
  APT prefers testing-proposed-updates
  APT policy: (500, 'testing-proposed-updates'), (500, 'unstable'), (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.30-1-amd64 (SMP w/1 CPU core)
Locale: LANG=uk_UA.UTF-8, LC_CTYPE=uk_UA.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages linux-image-2.6.30-1-amd64 depends on:
ii  cdebconf [debconf-2.0]        0.139+b1   Debian Configuration Management Sy
ii  debconf [debconf-2.0]         1.5.27     Debian configuration management sy
ii  initramfs-tools [linux-initra 0.93.3     tools for generating an initramfs
ii  module-init-tools             3.9-2      tools for managing Linux kernel mo
ii  yaird [linux-initramfs-tool]  0.0.13-5   Yet Another mkInitRD

linux-image-2.6.30-1-amd64 recommends no packages.

Versions of packages linux-image-2.6.30-1-amd64 suggests:
ii  grub-pc [grub]           1.96+20090709-1 GRand Unified Bootloader, version 
ii  linux-doc-2.6.30         2.6.30-2        Linux kernel specific documentatio

-- debconf information:
  linux-image-2.6.30-1-amd64/preinst/initrd-2.6.30-1-amd64:
  linux-image-2.6.30-1-amd64/postinst/create-kimage-link-2.6.30-1-amd64: true
  linux-image-2.6.30-1-amd64/preinst/abort-overwrite-2.6.30-1-amd64:
  linux-image-2.6.30-1-amd64/postinst/kimage-is-a-directory:
  linux-image-2.6.30-1-amd64/preinst/lilo-initrd-2.6.30-1-amd64: true
  linux-image-2.6.30-1-amd64/prerm/removing-running-kernel-2.6.30-1-amd64: true
  linux-image-2.6.30-1-amd64/preinst/elilo-initrd-2.6.30-1-amd64: true
  linux-image-2.6.30-1-amd64/postinst/depmod-error-2.6.30-1-amd64: false
  linux-image-2.6.30-1-amd64/preinst/failed-to-move-modules-2.6.30-1-amd64:
  linux-image-2.6.30-1-amd64/postinst/old-system-map-link-2.6.30-1-amd64: true
  shared/kernel-image/really-run-bootloader: true
  linux-image-2.6.30-1-amd64/postinst/bootloader-error-2.6.30-1-amd64:
  linux-image-2.6.30-1-amd64/preinst/lilo-has-ramdisk:
  linux-image-2.6.30-1-amd64/postinst/old-dir-initrd-link-2.6.30-1-amd64: true
  linux-image-2.6.30-1-amd64/postinst/old-initrd-link-2.6.30-1-amd64: true
  linux-image-2.6.30-1-amd64/prerm/would-invalidate-boot-loader-2.6.30-1-amd64: true
  linux-image-2.6.30-1-amd64/preinst/bootloader-initrd-2.6.30-1-amd64: true
  linux-image-2.6.30-1-amd64/preinst/overwriting-modules-2.6.30-1-amd64: true
  linux-image-2.6.30-1-amd64/postinst/depmod-error-initrd-2.6.30-1-amd64: false
  linux-image-2.6.30-1-amd64/preinst/abort-install-2.6.30-1-amd64:
  linux-image-2.6.30-1-amd64/postinst/bootloader-test-error-2.6.30-1-amd64:





More information about the Secure-testing-team mailing list