Bug 528868 - (CVE-2009-3612) CVE-2009-3612 kernel: tcf_fill_node() infoleak due to typo in 9ef1d4c7
CVE-2009-3612 kernel: tcf_fill_node() infoleak due to typo in 9ef1d4c7
Status: ASSIGNED
Product: Security Response
Classification: Other
Component: vulnerability (Show other bugs)
unspecified
All Linux
medium Severity medium
: ---
: ---
Assigned To: Red Hat Product Security
impact=moderate,reported=20091014,pub...
: Reopened, Security
Depends On: 527906 528869 528870 528871 528872 531611 537298
Blocks:
  Show dependency treegraph
 
Reported: 2009-10-14 02:37 EDT by Eugene Teo (Security Response)
Modified: 2016-04-18 05:52 EDT (History)
13 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
: 531611 (view as bug list)
Environment:
Last Closed: 2009-10-20 08:54:38 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:


Attachments (Terms of Use)

  None (edit)
Description Eugene Teo (Security Response) 2009-10-14 02:37:41 EDT
Quote from http://patchwork.ozlabs.org/patch/35412/:
Commit 9ef1d4c7c7aca1cd436612b6ca785b726ffb8ed8 introduced a typo in initialization.
Comment 2 Eugene Teo (Security Response) 2009-10-14 22:48:43 EDT
Incomplete fix for CVE-2005-4881.
Comment 4 Fedora Update System 2009-10-17 21:57:14 EDT
kernel-2.6.30.9-90.fc11 has been submitted as an update for Fedora 11.
http://admin.fedoraproject.org/updates/kernel-2.6.30.9-90.fc11
Comment 5 Jan Lieskovsky 2009-10-20 04:49:03 EDT
MITRE's CVE-2009-3612 record:
-----------------------------
The tcf_fill_node function in net/sched/cls_api.c in the netlink
subsystem in the Linux kernel 2.6.x before 2.6.32-rc5, and 2.4.37.6
and earlier, does not initialize a certain tcm__pad2 structure member,
which might allow local users to obtain sensitive information from
kernel memory via unspecified vectors. NOTE: this issue exists because
of an incomplete fix for CVE-2005-4881.

References:
-----------
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ad61df918c44316940404891d5082c63e79c256a
http://patchwork.ozlabs.org/patch/35412/
http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc5
Comment 6 Vitaly Mayatskikh 2009-10-20 08:54:38 EDT
This was fixed in 89.0.15 as a typo fix for bz521602 (CVE-2005-4881). Changelog will be actualized in next 4.8.z build.
Comment 7 Vitaly Mayatskikh 2009-10-20 08:55:21 EDT
Sorry, comment was intened for 4.8.z bz :(
Comment 8 Fedora Update System 2009-10-27 02:47:16 EDT
kernel-2.6.30.9-90.fc11 has been pushed to the Fedora 11 stable repository.  If problems still persist, please make note of it in this bug report.
Comment 9 errata-xmlrpc 2009-11-03 13:21:46 EST
This issue has been addressed in following products:

  MRG for RHEL-5

Via RHSA-2009:1540 https://rhn.redhat.com/errata/RHSA-2009-1540.html
Comment 10 Fedora Update System 2009-11-05 00:14:54 EST
kernel-2.6.27.38-170.2.113.fc10 has been submitted as an update for Fedora 10.
http://admin.fedoraproject.org/updates/kernel-2.6.27.38-170.2.113.fc10
Comment 11 Fedora Update System 2009-11-05 19:05:11 EST
kernel-2.6.27.38-170.2.113.fc10 has been pushed to the Fedora 10 stable repository.  If problems still persist, please make note of it in this bug report.
Comment 13 errata-xmlrpc 2009-12-15 12:19:10 EST
This issue has been addressed in following products:

  Red Hat Enterprise Linux 5

Via RHSA-2009:1670 https://rhn.redhat.com/errata/RHSA-2009-1670.html

Note You need to log in before you can comment on or make changes to this bug.