Bug 1039054 (CVE-2013-6431)

Summary:	CVE-2013-6431 kernel: net: fib: fib6_add: potential NULL pointer dereference
Product:	[Other] Security Response	Reporter:	Prasad Pandit <ppandit>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	low	Docs Contact:
Priority:	low
Version:	unspecified	CC:	agordeev, anton, aquini, bhu, davej, dhoward, esammons, fhrbata, gansalmon, iboverma, itamar, jforbes, jkacur, jkurik, jonathan, jross, jwboyer, kernel-maint, kernel-mgr, lgoncalv, lwang, madhu.chinakonda, mcressma, npajkovs, pholasek, plougher, rt-maint, rvrbovsk, williams
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2014-01-28 19:07:44 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1039070, 1039071
Bug Blocks:	1028025

Description Prasad Pandit 2013-12-06 13:29:52 UTC

Linux kernel built with the IPv6 protocol(CONFIG_IPv6) along with the IPv6
source address based routing support(CONFIG_IPV6_SUBTREE) is vulnerable to a
NULL pointer dereference flaw. It could occur while doing an ioctl(SIOCADDRT)
call on an IPv6 socket. User would need to have CAP_NET_ADMIN privileges to
perform such a call.

A user/program with CAP_NET_ADMIN privileges could use this flaw to crash a
system resulting in DoS.

Upstream fix:
-------------
 -> https://git.kernel.org/linus/ae7b4e1f213aa659aedf9c6ecad0bf5f0476e1e2

Comment 1 Prasad Pandit 2013-12-06 14:13:51 UTC

Statement:

This issue does not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 5 and Red Hat Enterprise Linux 6.

Comment 3 errata-xmlrpc 2014-01-28 17:41:43 UTC

This issue has been addressed in following products:

  MRG for RHEL-6 v.2

Via RHSA-2014:0100 https://rhn.redhat.com/errata/RHSA-2014-0100.html