Bug 243148 (CVE-2008-4410)

Summary:	Kernel: vmi_write_ldt_entry() DOS (CVE-2008-4410)
Product:	Gentoo Security	Reporter:	Stefan Behte (RETIRED) <craig>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	kernel
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git;a=commit;h=de59985e3a623d4d5d6207f1777398ca0606ab1c
Whiteboard:	[linux <2.6.25.18] [linux >=2.6.26 <2.6.26.6]
Package list:		Runtime testing required:	---

Description Stefan Behte (RETIRED) gentoo-dev

2008-10-21 22:14:28 UTC

CVE-2008-4410 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-4410):
  The vmi_write_ldt_entry function in arch/x86/kernel/vmi_32.c in the
  Virtual Machine Interface (VMI) in the Linux kernel 2.6.26.5 invokes
  write_idt_entry where write_ldt_entry was intended, which allows
  local users to cause a denial of service (persistent application
  failure) via crafted function calls, related to the Java Runtime
  Environment (JRE) experiencing improper LDT selector state, a
  different vulnerability than CVE-2008-3247.

Comment 1 Stefan Behte (RETIRED) gentoo-dev

2008-10-21 22:26:18 UTC

Excluding hardened, they have >= 2.6.26.7 (sorry guys).

Comment 2 Stefan Behte (RETIRED) gentoo-dev

2008-10-21 22:28:23 UTC

Damn, xcuse my bugspam.
According to http://www.securityfocus.com/bid/31565 this affects higher kernel versions as well.

Comment 3 RumpletonBongworth 2009-07-20 20:32:52 UTC

hardened-kernel unaffected at present time. Removing alias.

PS: genpatches-2.6.26-3 added 2.6.26.6. =genpatches-2.6.25* remains vulnerable. However, hardened-sources-2.6.25-r13 does not because we independently folded in the newer stable patches out of necessity :p