Bug 156685

Summary: CAN-2005-1369 i2c alarms sysfs DoS
Product: [Fedora] Fedora Reporter: Mark J. Cox <mjc>
Component: kernelAssignee: Dave Jones <davej>
Status: CLOSED ERRATA QA Contact: Brian Brock <bbrock>
Severity: medium Docs Contact:
Priority: medium    
Version: 3CC: pfrields, wtogami
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2005-06-28 10:52:07 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Mark J. Cox 2005-05-03 12:05:19 UTC
+++ This bug was initially created as a clone of Bug #156683 +++

The (1) it87 and (2) via686a drivers in I2C for Linux 2.6.x before
2.6.11.8, and 2.6.12 before 2.6.12-rc2, create the sysfs "alarms" file
with write permissions, which allows local users to cause a denial of
service (CPU consumption) by attempting to write to the file, which
does not have an associated store function.

See 
        http://archives.andrew.net.au/lm-sensors/msg31215.html

Comment 1 Dave Jones 2005-05-18 03:30:39 UTC
should be fixed in the 2.6.11.10 rebased update kernel currently in testing.

Comment 2 Mark J. Cox 2005-06-28 10:52:07 UTC
fixed FEDORA-2005-412