Bug 245754 (CVE-2008-3527)

Summary:	Kernel: < 2.6.21 arch/i386/kernel/sysenter.c privilege escalation/DOS (CVE-2008-3527)
Product:	Gentoo Security	Reporter:	Stefan Behte (RETIRED) <craig>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	kernel
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=7d91d531900bfa1165d445390b3b13a8013f98f7
Whiteboard:	[linux <2.6.21]
Package list:		Runtime testing required:	---

Description Stefan Behte (RETIRED) gentoo-dev

2008-11-05 21:33:06 UTC

CVE-2008-3527 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-3527):
  arch/i386/kernel/sysenter.c in the Virtual Dynamic Shared Objects
  (vDSO) implementation in the Linux kernel before 2.6.21 does not
  properly check boundaries, which allows local users to gain
  privileges or cause a denial of service via unspecified vectors,
  related to the install_special_mapping, syscall, and syscall32_nopage
  functions.