Bug 72317 - Kernel: AF_UNIX Arbitrary Kernel Memory Modification (CAN-2004-{1068,1069})
|
Bug#:
72317
|
Product: Gentoo Security
|
Version: unspecified
|
Platform: All
|
|
OS/Version: All
|
Status: RESOLVED
|
Severity: normal
|
Priority: P2
|
|
Resolution: FIXED
|
Assigned To: security@gentoo.org
|
Reported By: jaervosz@gentoo.org
|
|
Component: Kernel
|
|
|
URL:
http://www.securityfocus.com/bid/11715/
|
|
Summary: Kernel: AF_UNIX Arbitrary Kernel Memory Modification (CAN-2004-{1068,1069})
|
|
Keywords:
|
|
Status Whiteboard: [linux <2.4.28] [linux >=2.6 <2.6.10]
|
|
Opened: 2004-11-23 23:51 0000
|
scox if you can't bump hardened-sources to 2.4.28 then please add this patch.
hardened-sources-2.4.28 ~arch in tree
Ok, all done. Following externally maintained sources need patching:
gentoo-dev-sources - Adding dsd...
hardened-dev-sources - Adding hardened herd...
hppa-dev-sources - Adding GMSoft...
mips-sources - Adding Kumba...
openmosix-sources - Adding cluster herd...
pegasos-dev-sources - Adding dholm...
rsbac-dev-sources - Adding kang...
Fixed in stable hardened-dev-sources-r16
rsbac-dev-sources: fixed.
pegasos-dev-sources fixed
---------------snip-----------------
CAN-2004-1068:
A race condition was discovered in the handling of AF_UNIX network packets.
This reportedly allowed local users to modify arbitrary kernel memory,
facilitating privilege escalation, or possibly allowing code execution in the
context of the kernel.
CAN-2004-1069:
Ross Kendall Axe discovered a possible kernel panic (causing a Denial of
Service) while sending AF_UNIX network packages if the kernel options
CONFIG_SECURITY_NETWORK and CONFIG_SECURITY_SELINUX are enabled.
---------------snip--------------
Does our patches also cover the SELinux-specific problem (-1069) ?
*** IMPORTANT *** The following maintainers need to add also the CAN-2004-1069
patch on this bug. Please note that CAN-2004-1069 only applies to 2.6...
gentoo-dev-sources - dsd, please patch...
hardened-dev-sources - hardened herd, please patch...
hppa-dev-sources - Adding GMSoft...
mips-sources - Adding Kumba...
pegasos-dev-sources - Adding dholm...
rsbac-dev-sources - kang, please patch...
rsbac-dev-sources: fixed for CAN-2004-1069.
hardened-dev-sources-r18 has CAN-2004-1069 patch added
pegasos-dev-sources fixed
hppa-sources-2.6.10 isn't affected by this one. (patch say it's already
applied)
All kernels fixed, closing bug; notifications are being migrated away from
GLSAs for kernels, more news coming soon so stay tuned :-]
