Bug 294240

Summary:	Kernel: do_mmap_pgoff() DoS (CVE-2009-3888)
Product:	Gentoo Security	Reporter:	Alex Legler (RETIRED) <a3li>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=89a8640279f8bb78aaf778d1fc5c4a6778f18064
Whiteboard:	[linux <2.6.31.6] [gp <2.6.31-7]
Package list:		Runtime testing required:	---

Description Alex Legler (RETIRED) archtester

2009-11-23 17:35:34 UTC

CVE-2009-3888 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-3888):
  The do_mmap_pgoff function in mm/nommu.c in the Linux kernel before
  2.6.31.6, when the CPU lacks a memory management unit, allows local
  users to cause a denial of service (OOPS) via an application that
  attempts to allocate a large amount of memory.

Comment 1 George Kadianakis (RETIRED) gentoo-dev

2009-12-14 15:33:31 UTC

Released in >=sys-kernel/gentoo-sources-2.6.31-r6.