Bug 307441

Summary:	Kernel: mmap/do_mremap DoS (CVE-2010-0291)
Product:	Gentoo Security	Reporter:	Alex Legler (RETIRED) <a3li>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	jaak
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.4
Whiteboard:	[linux < 2.6.32.4]
Package list:		Runtime testing required:	---

Description Alex Legler (RETIRED) archtester

2010-03-02 09:35:35 UTC

CVE-2010-0291 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-0291):
  The Linux kernel before 2.6.32.4 allows local users to gain
  privileges or cause a denial of service (panic) by calling the (1)
  mmap or (2) mremap function, aka the "do_mremap() mess" or
  "mremap/mmap mess."