Bug 307447

Summary:	Kernel: do_pages_move() Memory disclosure/DoS/? (CVE-2010-0415)
Product:	Gentoo Security	Reporter:	Alex Legler (RETIRED) <a3li>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	jaak
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.33-rc7
Whiteboard:	[linux < 2.6.33-rc7]
Package list:		Runtime testing required:	---

Description Alex Legler (RETIRED) archtester

2010-03-02 09:40:57 UTC

CVE-2010-0415 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-0415):
  The do_pages_move function in mm/migrate.c in the Linux kernel before
  2.6.33-rc7 does not validate node values, which allows local users to
  read arbitrary kernel memory locations, cause a denial of service
  (OOPS), and possibly have unspecified other impact by specifying a
  node that is not part of the kernel's node set.