Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 357085 - Linux Kernel epoll Subsystem 'eventpoll.c' Multiple Local Denial of Service Vulnerabilities
Summary: Linux Kernel epoll Subsystem 'eventpoll.c' Multiple Local Denial of Service V...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Kernel (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Gentoo Kernel Security
URL: http://www.securityfocus.com/bid/4663...
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-03-02 13:17 UTC by kerncode
Modified: 2018-04-04 17:32 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description kerncode 2011-03-02 13:17:22 UTC
it affects kernel 2.6 up to 2.6.36 


In several places, an epoll fd can call another file's ->f_op->poll()
method with ep->mtx held.  This is in general unsafe, because that other
file could itself be an epoll fd that contains the original epoll fd.

The code defends against this possibility in its own ->poll() method using
ep_call_nested, but there are several other unsafe calls to ->poll
elsewhere that can be made to deadlock.


link to git-kernel diff:
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=22bacca48a1755f79b7e0f192ddb9fbb7fc6e64e
Comment 1 Aaron Bauman (RETIRED) gentoo-dev 2018-04-04 17:32:31 UTC
There are no longer any 2.x kernels available in the repository with the exception of sys-kernel/xbox-sources which is unsupported by security.