Bug 659574

Summary: CVE-2010-4258 kernel: failure to revert address limit override in OOPS error path [mrg-1.3]
Product: Red Hat Enterprise MRG Reporter: Eugene Teo (Security Response) <eteo>
Component: realtime-kernelAssignee: John Kacur <jkacur>
Status: CLOSED ERRATA QA Contact: David Sommerseth <davids>
Severity: medium Docs Contact:
Priority: medium    
Version: DevelopmentCC: bhu, jkacur, lgoncalv, ovasik, williams
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-03-10 20:06:00 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 659567    

Comment 3 David Sommerseth 2011-03-01 22:23:30 UTC
Verified by code review.

Found bz659574_CVE-2010-4258-do_exit-check-is-run-with-get_fs-USER_DS.patch applied to kernel-rt-2.6.33.7-rt29.52.src.rpm, from upstream commit 33dd94ae1ccbfb7bf0fb6c692bc3d1c4269e6177.

Comment 5 errata-xmlrpc 2011-03-10 20:06:00 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHSA-2011-0330.html