Bug 273919 (CVE-2009-1914)

Summary:	Kernel: <2.6.29 pci_register_iommu_region arch/sparc/kernel/pci_common.c DOS (CVE-2009-1914)
Product:	Gentoo Security	Reporter:	Stefan Behte (RETIRED) <craig>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	brayan, hardened-kernel+disabled, kernel
Priority:	High
Version:	unspecified
Hardware:	Sparc
OS:	Linux
URL:	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=192d7a4667c6d11d1a174ec4cad9a3c5d5f9043c
Whiteboard:	[linux <2.6.27.25] [linux >=2.6.28 <2.6.29]
Package list:		Runtime testing required:	---

Description Stefan Behte (RETIRED) gentoo-dev

2009-06-12 21:05:05 UTC

CVE-2009-1914 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-1914):
  The pci_register_iommu_region function in
  arch/sparc/kernel/pci_common.c in the Linux kernel before 2.6.29 on
  the sparc64 platform allows local users to cause a denial of service
  (system crash) by reading the /proc/iomem file, related to
  uninitialized pointers and the request_resource function.

Comment 1 Brayan Arraes (YacK) 2009-07-10 23:37:22 UTC

find fix in

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=blobdiff;f=arch/sparc/kernel/pci_common.c;h=b775658a927d2ffc28507a8560ac89f19cff172f;hp=64e6edf17b9d2ea860533766588235b6340e20b8;hb=192d7a4667c6d11d1a174ec4cad9a3c5d5f9043c;hpb=42cc77c861e8e850e86252bb5b1e12e006261973

Comment 2 kfm 2009-07-24 20:55:51 UTC

Note that the path to the file is "arch/sparc64/kernel/pci_common.c" in kernels prior to 2.6.29.