Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 214186 (CVE-2007-3739)

Summary: mm/mmap.c bug in the hugetlb kernel on PPC (CVE-2007-3739)
Product: Gentoo Security Reporter: unnamedrambler
Component: KernelAssignee: Gentoo Security <security>
Status: RESOLVED FIXED    
Severity: normal CC: chainsaw, kernel
Priority: High    
Version: unspecified   
Hardware: PPC   
OS: Linux   
URL: http://www.debian.org/security/2007/dsa-1378
Whiteboard: [linux < 2.6.16.56][linux < 2.6.19.3][linux < 2.6.20][genpatches < 2.6.20-1]
Package list:
Runtime testing required: ---

Description unnamedrambler 2008-03-21 23:28:32 UTC
+++ This bug was initially created as a clone of Bug #194075 +++

CVE-2007-3739:
  mm/mmap.c in the hugetlb kernel, when run on PowerPC systems, does
  not prevent stack expansion from entering into reserved kernel page
  memory, which allows local users to cause a denial of service (OOPS)
  via unspecified vectors.