oss-sec mailing list archives
Re: CVE request: kernel: fix soft lockups/OOM issues with unix garbage collector
From: "Steven M. Christey" <coley () linus mitre org>
Date: Mon, 1 Dec 2008 11:05:01 -0500 (EST)
====================================================== Name: CVE-2008-5300 Status: Candidate URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5300 Reference: MLIST:[linux-netdev] 20081120 soft lockups/OOM after unix socket fixes Reference: URL:http://marc.info/?l=linux-netdev&m=122721862313564&w=2 Reference: MLIST:[linux-netdev] 20081125 [PATCH] Fix soft lockups/OOM issues w/ unix garbage collector Reference: URL:http://marc.info/?l=linux-netdev&m=122765505415944&w=2 Reference: CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=470201 Linux kernel 2.6.28 allows local users to cause a denial of service ("soft lockup" and process loss) via a large number of sendmsg function calls, which does not block during AF_UNIX garbage collection and triggers an OOM condition, a different vulnerability than CVE-2008-5029.
Current thread:
- CVE request: kernel: fix soft lockups/OOM issues with unix garbage collector Eugene Teo (Nov 27)
- Re: CVE request: kernel: fix soft lockups/OOM issues with unix garbage collector Steven M. Christey (Dec 01)