Back to bug 1384851
| Who | When | What | Removed | Added |
|---|---|---|---|---|
| Andrej Nemec | 2016-10-14 09:30:47 UTC | Depends On | 1384852 | |
| Andrej Nemec | 2016-10-14 09:32:35 UTC | Blocks | 1384853 | |
| Salvatore Bonaccorso | 2016-10-29 19:08:25 UTC | CC | carnil | |
| Vladis Dronov | 2016-11-02 17:11:29 UTC | CC | vdronov | |
| Doc Text | The XFS subsystem in the Linux kernel 4.4 and later allows local users to cause a denial of service (fdatasync failure and system hang) by using the vfs syscall group in the trinity program, as a result of a page lock order bug in the XFS seek hole/data implementation. | |||
| Whiteboard | impact=moderate,public=20161013,reported=20161013,source=oss-security,cvss2=4.7/AV:L/AC:M/Au:N/C:N/I:N/A:C,cvss3=5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H,cwe=CWE-667,rhel-5/kernel=new,rhel-6/kernel=new,rhel-7/kernel=new,rhel-7/kernel-rt=new,mrg-2/realtime-kernel=new,rhelsa-7/arm-kernel=new,fedora-all/kernel=affected | impact=moderate,public=20161013,reported=20161013,source=oss-security,cvss2=4.7/AV:L/AC:M/Au:N/C:N/I:N/A:C,cvss3=5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H,cwe=CWE-667,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,rhel-7/kernel=notaffected,rhel-7/kernel-rt=notaffected,mrg-2/realtime-kernel=notaffected,rhelsa-7/arm-kernel=wontfix,fedora-all/kernel=affected | ||
| Vladis Dronov | 2016-11-02 17:11:58 UTC | Whiteboard | impact=moderate,public=20161013,reported=20161013,source=oss-security,cvss2=4.7/AV:L/AC:M/Au:N/C:N/I:N/A:C,cvss3=5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H,cwe=CWE-667,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,rhel-7/kernel=notaffected,rhel-7/kernel-rt=notaffected,mrg-2/realtime-kernel=notaffected,rhelsa-7/arm-kernel=wontfix,fedora-all/kernel=affected | impact=low,public=20161013,reported=20161013,source=oss-security,cvss2=4.7/AV:L/AC:M/Au:N/C:N/I:N/A:C,cvss3=5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H,cwe=CWE-667,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,rhel-7/kernel=notaffected,rhel-7/kernel-rt=notaffected,mrg-2/realtime-kernel=notaffected,rhelsa-7/arm-kernel=wontfix,fedora-all/kernel=affected |
| Vladis Dronov | 2016-11-02 17:12:14 UTC | Severity | medium | low |
| Vladis Dronov | 2016-11-02 17:12:34 UTC | Priority | medium | low |
| Vladis Dronov | 2016-11-02 17:33:36 UTC | Doc Text | The XFS subsystem in the Linux kernel 4.4 and later allows local users to cause a denial of service (fdatasync failure and system hang) by using the vfs syscall group in the trinity program, as a result of a page lock order bug in the XFS seek hole/data implementation. | The XFS subsystem in the Linux kernel 4.4 and later allows local users to cause a denial of service (fdatasync() failure and system hang) by using the vfs syscall group in the 'trinity' program, as a result of a page lock order bug in the XFS seek hole/data implementation. |
| Vladis Dronov | 2016-11-02 17:50:24 UTC | Status | NEW | CLOSED |
| Resolution | --- | NOTABUG | ||
| Last Closed | 2016-11-02 13:50:24 UTC | |||
| Salvatore Bonaccorso | 2018-02-25 16:21:26 UTC | CC | security-response-team | |
| Flags | needinfo?(security-response-team) | |||
| Yogendra Jog | 2018-02-26 06:50:28 UTC | CC | yjog | |
| Flags | needinfo?(vdronov) | |||
| Yogendra Jog | 2018-02-26 10:10:19 UTC | Flags | needinfo?(security-response-team) | |
| Vladis Dronov | 2018-02-26 12:11:10 UTC | Flags | needinfo?(vdronov) | |
| Product Security DevOps Team | 2019-09-29 13:57:57 UTC | Whiteboard | impact=low,public=20161013,reported=20161013,source=oss-security,cvss2=4.7/AV:L/AC:M/Au:N/C:N/I:N/A:C,cvss3=5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H,cwe=CWE-667,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,rhel-7/kernel=notaffected,rhel-7/kernel-rt=notaffected,mrg-2/realtime-kernel=notaffected,rhelsa-7/arm-kernel=wontfix,fedora-all/kernel=affected |
Back to bug 1384851