Bug 228816 - CVE-2007-0771 utrace regression / denial of service
CVE-2007-0771 utrace regression / denial of service
Status: CLOSED ERRATA
Product: Red Hat Enterprise Linux 5
Classification: Red Hat
Component: kernel (Show other bugs)
5.0
All Linux
urgent Severity high
: ---
: ---
Assigned To: Roland McGrath
Brian Brock
impact=important,source=lkml,reported...
: Security
Depends On:
Blocks: 229886
  Show dependency treegraph
 
Reported: 2007-02-15 04:57 EST by Marcel Holtmann
Modified: 2007-11-30 17:07 EST (History)
4 users (show)

See Also:
Fixed In Version: RHSA-2007-0169
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2007-04-30 12:36:53 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)
fix for utrace/ptrace leak and crash bugs with MT exec (5.87 KB, patch)
2007-03-07 06:20 EST, Roland McGrath
no flags Details | Diff
modified test program (1.24 KB, text/x-csrc)
2007-03-07 14:40 EST, Roland McGrath
no flags Details
fix for utrace/ptrace leak and crash bugs with MT exec + utrace_attach spin failure mode (7.10 KB, patch)
2007-03-07 22:10 EST, Roland McGrath
no flags Details | Diff

  None (edit)
Description Marcel Holtmann 2007-02-15 04:57:41 EST
It is possible to render a system with utrace support unusable in ~10 seconds
(but not mainline kernel where Ctrl+C will kill process).
Comment 7 Roland McGrath 2007-03-07 06:20:32 EST
Created attachment 149446 [details]
fix for utrace/ptrace leak and crash bugs with MT exec

This fixes both OOM and BUG_ON failure modes and another crash failure mode
from the same problem.	I can't reproduce any problems in the test case after
this patch, where I got all three failure modes before.
Comment 11 Roland McGrath 2007-03-07 14:40:38 EST
Created attachment 149481 [details]
modified test program

Here is the version of the test I have been using.
It prints out some more info, but not so much that it perturbed the behavior
for me.
Comment 12 Roland McGrath 2007-03-07 21:14:02 EST
Fedora bug 227952 is the same problems as this.
Comment 13 Roland McGrath 2007-03-07 22:10:44 EST
Created attachment 149546 [details]
fix for utrace/ptrace leak and crash bugs with MT exec + utrace_attach spin failure mode

This includes an additional fix that I think resolves a failure mode where
utrace_attach spins when you try to kill the test with SIGKILL.
Comment 23 Don Howard 2007-03-29 17:41:51 EDT
A patch for this issue has been included in zstream build 2.6.18-8.1.2.el5.
Comment 26 Mike Gahagan 2007-04-26 18:04:33 EDT
fix verified on an x86_64 test system, I had to run 3 concurrent copies of
ptrace_thrash to reproduce the problem initially.
Comment 28 Red Hat Bugzilla 2007-04-30 12:36:54 EDT
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHSA-2007-0169.html

Note You need to log in before you can comment on or make changes to this bug.