Bug 252729 (CVE-2008-5713)

Summary:	Linux <2.6.24.5 Add preemption point in qdisc_run (CVE-2008-5713)
Product:	Gentoo Security	Reporter:	Robert Buchholz (RETIRED) <rbu>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	kernel
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git;a=commit;h=2ba2506ca7ca62c56edaa334b0fe61eb5eab6ab0
Whiteboard:	[linux < 2.6.24.5] [gp < 2.6.24-7]
Package list:		Runtime testing required:	---

Description Robert Buchholz (RETIRED) gentoo-dev

2008-12-27 18:44:17 UTC

CVE-2008-5713 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-5713):
  The __qdisc_run function in net/sched/sch_generic.c in the Linux
  kernel before 2.6.25 on SMP machines allows local users to cause a
  denial of service (soft lockup) by sending a large amount of network
  traffic, as demonstrated by multiple simultaneous invocations of the
  Netperf benchmark application in UDP_STREAM mode.