Bug 262979 (CVE-2009-0935)

Summary:	Kernel: <2.6.29-rc3 inotify_read() DOS (CVE-2009-0935)
Product:	Gentoo Security	Reporter:	Stefan Behte (RETIRED) <craig>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	bernd, chainsaw, hardened-kernel+disabled, kernel
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://bugzilla.redhat.com/show_bug.cgi?id=488935
Whiteboard:	[linux <2.6.27.14] [linux >=2.6.28 <2.6.28.3]
Package list:		Runtime testing required:	---

Description Stefan Behte (RETIRED) gentoo-dev

2009-03-19 00:08:36 UTC

CVE-2009-0935 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-0935):
  The inotify_read function in the Linux kernel 2.6 before 2.6.29-rc3
  allows local users to cause a denial of service (OOPS) via a read
  with an invalid address to an inotify instance, which causes the
  device's event list mutex to be unlocked twice and prevents proper
  synchronization of a data structure for the inotify instance.