Bug 528868 (CVE-2009-3612)
| Summary: | CVE-2009-3612 kernel: tcf_fill_node() infoleak due to typo in 9ef1d4c7 | |||
|---|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | Eugene Teo (Security Response) <eteo> | |
| Component: | vulnerability | Assignee: | Nobody <nobody> | |
| Status: | ASSIGNED --- | QA Contact: | ||
| Severity: | medium | Docs Contact: | ||
| Priority: | medium | |||
| Version: | unspecified | CC: | bhu, kyle, lgoncalv, rkhan, vgoyal, williams | |
| Target Milestone: | --- | Keywords: | Reopened, Security | |
| Target Release: | --- | |||
| Hardware: | All | |||
| OS: | Linux | |||
| Whiteboard: | ||||
| Fixed In Version: | Doc Type: | Bug Fix | ||
| Doc Text: | Story Points: | --- | ||
| Clone Of: | ||||
| : | 531611 (view as bug list) | Environment: | ||
| Last Closed: | 2009-10-20 12:54:38 UTC | Type: | --- | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | 527906, 528869, 528870, 528871, 528872, 531611, 537298 | |||
| Bug Blocks: | ||||
|
Description
Eugene Teo (Security Response)
2009-10-14 06:37:41 UTC
Incomplete fix for CVE-2005-4881. Official upstream patch, now in 2.6.32-rc5: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff_plain;h=ad61df918c44316940404891d5082c63e79c256a kernel-2.6.30.9-90.fc11 has been submitted as an update for Fedora 11. http://admin.fedoraproject.org/updates/kernel-2.6.30.9-90.fc11 MITRE's CVE-2009-3612 record: ----------------------------- The tcf_fill_node function in net/sched/cls_api.c in the netlink subsystem in the Linux kernel 2.6.x before 2.6.32-rc5, and 2.4.37.6 and earlier, does not initialize a certain tcm__pad2 structure member, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors. NOTE: this issue exists because of an incomplete fix for CVE-2005-4881. References: ----------- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ad61df918c44316940404891d5082c63e79c256a http://patchwork.ozlabs.org/patch/35412/ http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc5 This was fixed in 89.0.15 as a typo fix for bz521602 (CVE-2005-4881). Changelog will be actualized in next 4.8.z build. Sorry, comment was intened for 4.8.z bz :( kernel-2.6.30.9-90.fc11 has been pushed to the Fedora 11 stable repository. If problems still persist, please make note of it in this bug report. This issue has been addressed in following products: MRG for RHEL-5 Via RHSA-2009:1540 https://rhn.redhat.com/errata/RHSA-2009-1540.html kernel-2.6.27.38-170.2.113.fc10 has been submitted as an update for Fedora 10. http://admin.fedoraproject.org/updates/kernel-2.6.27.38-170.2.113.fc10 kernel-2.6.27.38-170.2.113.fc10 has been pushed to the Fedora 10 stable repository. If problems still persist, please make note of it in this bug report. This issue has been addressed in following products: Red Hat Enterprise Linux 5 Via RHSA-2009:1670 https://rhn.redhat.com/errata/RHSA-2009-1670.html |