Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 132855 - Kernel: fs/locks.c Fix lease_init (CVE-2006-{1859,1860})
Summary: Kernel: fs/locks.c Fix lease_init (CVE-2006-{1859,1860})
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Kernel (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Gentoo Security
URL: http://kernel.org/git/?p=linux/kernel...
Whiteboard: [linux <2.6.16.16]
Keywords:
: 133024 133863 (view as bug list)
Depends on:
Blocks:
 
Reported: 2006-05-09 21:50 UTC by Sune Kloppenborg Jeppesen (RETIRED)
Modified: 2009-07-29 20:30 UTC (History)
4 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2006-05-09 21:50:56 UTC 
It is insane to be giving lease_init() the task of freeing the lock it is
 supposed to initialise, given that the lock is not guaranteed to be
 allocated on the stack. This causes lockups in fcntl_setlease().
 Problem diagnosed by Daniel Hokka Zakrisson <daniel@hozac.com>
 
 Also fix a slab leak in __setlease() due to an uninitialised return value.
 Problem diagnosed by Björn Steinbrink.
 
 Tested-by: Daniel Hokka Zakrisson <daniel@hozac.com>
Comment 1 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2006-05-09 21:50:56 UTC 
It is insane to be giving lease_init() the task of freeing the lock it is
 supposed to initialise, given that the lock is not guaranteed to be
 allocated on the stack. This causes lockups in fcntl_setlease().
 Problem diagnosed by Daniel Hokka Zakrisson <daniel@hozac.com>
 
 Also fix a slab leak in __setlease() due to an uninitialised return value.
 Problem diagnosed by Björn Steinbrink.
 
 Tested-by: Daniel Hokka Zakrisson <daniel@hozac.com>
Comment 2 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2006-05-11 00:14:45 UTC 
2.6.16.16 released to fix this issue.
Comment 3 Jakub Moc (RETIRED) gentoo-dev 2006-05-11 08:10:03 UTC 
*** Bug 133024 has been marked as a duplicate of this bug. ***
Comment 4 Tim Yamin (RETIRED) gentoo-dev 2006-05-18 13:54:17 UTC 
Dan, please bump genpatches to .16.16. Thanks.
Comment 5 Daniel Drake (RETIRED) gentoo-dev 2006-05-21 08:47:29 UTC 
Fixed in genpatches-2.6.16-10 (gentoo-sources-2.6.16-r8)
Comment 6 Tim Yamin (RETIRED) gentoo-dev 2006-05-26 08:22:52 UTC 
*** Bug 133863 has been marked as a duplicate of this bug. ***
Comment 7 Tim Yamin (RETIRED) gentoo-dev 2006-05-26 08:37:47 UTC 
Maintainers please bump:

hardened-sources-2.6: johnm, hardened herd
hppa-sources-2.6: GMSoft
rsbac-sources-2.6: kang
sh-sources-2.6: vapier
suspend2-sources-2.6: brix
usermode-sources-2.6: dang
Comment 8 Guy Martin (RETIRED) gentoo-dev 2006-05-26 09:05:15 UTC 
hppa-sources-2.6.16.18-pa11 in the tree.
Comment 9 Henrik Brix Andersen 2006-05-26 13:56:16 UTC 
Fixed in sys-kernel/suspend2-sources-2.6.16-r7.
Comment 10 Daniel Gryniewicz (RETIRED) gentoo-dev 2006-05-28 20:11:41 UTC 
usermode bumped to 2.6.16-r1
Comment 11 Tim Yamin (RETIRED) gentoo-dev 2006-06-24 11:50:42 UTC 
All fixed, closing. vapier please bump sh-sources.