Bug 730706 (CVE-2011-2918)

Summary:	CVE-2011-2918 kernel: perf: Fix software event overflow
Product:	[Other] Security Response	Reporter:	Petr Matousek <pmatouse>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	anton, aquini, arozansk, bhu, davej, dhoward, fhrbata, gansalmon, itamar, jkacur, jonathan, kernel-maint, kernel-mgr, kmcmartin, lgoncalv, lwang, madhu.chinakonda, plougher, rt-maint, sforsber, tcallawa, vgoyal, williams
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2012-05-10 12:59:23 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	730707, 730708, 730709, 761361
Bug Blocks:	730648

Description Petr Matousek 2011-08-15 13:18:36 UTC

Under certain circumstances software event overflows go wrong and deadlock. Avoid trying to delete a timer from the timer callback.

Upstream fix:
a8b0ca17b80e92faab46ee7179ba9e99ccb61233

References:
https://lkml.org/lkml/2011/7/27/337
https://lkml.org/lkml/2011/7/28/284

Comment 3 Petr Matousek 2011-08-15 13:44:28 UTC

Statement:

This issue did not affect Red Hat Enterprise Linux 4 and 5 as they did not include support for perf. This has been addressed in Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1350.html and https://rhn.redhat.com/errata/RHSA-2012-0333.html.

Comment 5 errata-xmlrpc 2011-10-05 21:48:02 UTC

This issue has been addressed in following products:

  Red Hat Enterprise Linux 6

Via RHSA-2011:1350 https://rhn.redhat.com/errata/RHSA-2011-1350.html

Comment 7 errata-xmlrpc 2012-02-23 20:22:48 UTC

This issue has been addressed in following products:

  MRG for RHEL-6 v.2

Via RHSA-2012:0333 https://rhn.redhat.com/errata/RHSA-2012-0333.html