Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 254903 (CVE-2008-4307)

Summary: Kernel: Race condition in do_setlk() in fs/nfs/file.c (CVE-2008-4307)
Product: Gentoo Security Reporter: Stefan Behte (RETIRED) <craig>
Component: KernelAssignee: Gentoo Security <security>
Severity: normal CC: hardened-kernel+disabled, kernel
Priority: High    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard: [linux <2.6.26]
Package list:
Runtime testing required: ---

Description Stefan Behte (RETIRED) gentoo-dev Security 2009-01-13 23:39:58 UTC
CVE-2008-4307 (
  Race condition in the do_setlk function in fs/nfs/file.c in the Linux
  kernel before 2.6.26 allows local users to cause a denial of service
  (crash) via vectors resulting in an interrupted RPC call that leads
  to a stray FL_POSIX lock, related to improper handling of a race
  between fcntl and close in the EINTR case.