Red Hat Bugzilla – Bug 241863
CVE-2007-2525 PPPoE socket PPPIOCGCHAN denial of service
Last modified: 2007-11-30 17:07:44 EST
A vulnerability has been reported in the Linux Kernel, which potentially can be
exploited by malicious, local users to cause a DoS (Denial of Service).
The vulnerability is caused due to a memory leak when releasing PPPoE sockets
after they are connected, but before the "PPPIOCGCHAN" ioctl is called. This can
be exploited to cause a DoS due to memory exhaustion.
A patch addressing this issue has been included in build 2.6.18-8.1.6.el5
Confirmed the patch is in 2.6.18-8.1.6.el5
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.