Bug 196120

Summary:	Linux <2.6.19-rc4 Hugetlb local DoS (CVE-2007-4133)
Product:	Gentoo Security	Reporter:	Robert Buchholz (RETIRED) <rbu>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	kernel, svrmarty
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	[linux < 2.6.19][genpatches < 2.6.19-1]
Package list:		Runtime testing required:	---

Description Robert Buchholz (RETIRED) gentoo-dev

2007-10-17 00:37:54 UTC

CVE-2007-4133:
  The (1) hugetlb_vmtruncate_list and (2) hugetlb_vmtruncate functions in
  fs/hugetlbfs/inode.c in the Linux kernel before 2.6.19-rc4 perform certain
  prio_tree calculations using HPAGE_SIZE instead of PAGE_SIZE units, which
  allows local users to cause a denial of service (panic) via unspecified
  vectors.

Comment 1 svrmarty 2009-08-05 16:01:43 UTC

latest update from 2007

please close