158790 – Linux 2.6.x ReiserFS Sync Memory Corruption (CVE-2006-6128)

Bug 158790 - Linux 2.6.x ReiserFS Sync Memory Corruption (CVE-2006-6128)

Summary: Linux 2.6.x ReiserFS Sync Memory Corruption (CVE-2006-6128)

Status:	RESOLVED INVALID

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Kernel (show other bugs)
Hardware:	All Linux

Importance:	High normal (vote)
Assignee:	Gentoo Security

URL:	http://projects.info-pull.com/mokb/MO...
Whiteboard:
Keywords:

Duplicates (1):	156403 (view as bug list)
Depends on:
Blocks:

Reported:	2006-12-21 18:58 UTC by Daniel Drake (RETIRED)
Modified:	2007-08-30 13:12 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Daniel Drake (RETIRED) gentoo-dev

2006-12-21 18:58:59 UTC

The ReiserFS support code of Linux 2.6.x fails to properly handle crafted data structures, leading to an exploitable memory corruption condition when a sync is being done in a corrupted ReiserFS filesystem.

Comment 1 Daniel Drake (RETIRED) gentoo-dev

2006-12-23 07:58:19 UTC

Not yet fixed upstream. Filed a bug here as I couldn't find any mention of it:
http://bugzilla.kernel.org/show_bug.cgi?id=7737

Comment 2 Daniel Drake (RETIRED) gentoo-dev

2007-01-01 20:20:31 UTC

*** Bug 156403 has been marked as a duplicate of this bug. ***

Comment 3 Daniel Drake (RETIRED) gentoo-dev

2007-08-30 13:12:56 UTC

Bug was only ever present in fedora kernels, closing