Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 294245 (CVE-2009-4005)

Summary: Kernel: collect_rx_frame() buffer under-read ? (CVE-2009-4005)
Product: Gentoo Security Reporter: Alex Legler (RETIRED) <a3li>
Component: KernelAssignee: Gentoo Security <security>
Severity: normal CC: kernel
Priority: High    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard: [linux <] [linux >=2.6.28 <] [gp <2.6.31-8]
Package list:
Runtime testing required: ---

Description Alex Legler (RETIRED) archtester gentoo-dev Security 2009-11-23 17:39:36 UTC
CVE-2009-4005 (
  The collect_rx_frame function in drivers/isdn/hisax/hfc_usb.c in the
  Linux kernel before 2.6.32-rc7 allows attackers to have an
  unspecified impact via a crafted HDLC packet that arrives over ISDN
  and triggers a buffer under-read.
Comment 1 Bjoern Tropf (RETIRED) gentoo-dev 2009-12-07 15:50:46 UTC
@Kernel: Please back-port this patch in the next 2.6.31 release.