Bug 145515 – Kernel: sys_perfmonctl() file descriptor reference count issue (CVE-2006-3741)

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description Sune Kloppenborg Jeppesen (RETIRED) 2006-08-29 12:24:03 UTC]

Stephane Eranian(HP) discovered a security problem with perfmon2.0 
in mainline kernel. Under certain circumstances, the perfmonctl() 
system call may not correctly manage the file descriptor reference 
count. As a consequence, the system may run out of file structure.

[Comment 1 Raphael Marichez (Falco) (RETIRED) 2006-10-06 13:09:19 UTC]

This one might be related with :
http://secunia.com/advisories/22279/
(or at least the 1st part of this Secunia Adv)

[Comment 2 Harlan Lieberman-Berg (RETIRED) 2006-12-15 08:14:05 UTC]

xen-sources, please bump to 2.6.18 in ~arch. You are in danger of hardmasking from 144820, same date applies here.

CVE is public, unlocking bug.

[Comment 3 Harlan Lieberman-Berg (RETIRED) 2007-02-13 16:15:26 UTC]

Xen, are you still vulnerable? 

[Comment 4 Andrew Ross (RETIRED) 2007-02-14 08:32:33 UTC]

According to http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3741, Itanium is the only arch affected by this.

[Comment 5 Harlan Lieberman-Berg (RETIRED) 2007-02-23 18:14:00 UTC]

In that case, closing.