Bug 312475

Summary:	Kernel: 32bit VDSO DoS on amd64 (CVE-2009-4271)
Product:	Gentoo Security	Reporter:	Alex Legler (RETIRED) <a3li>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://bugzilla.redhat.com/show_bug.cgi?id=548876
Whiteboard:	[linux >= 2.6.9] [linux <= 2.6.17]
Package list:		Runtime testing required:	---

Description Alex Legler (RETIRED) archtester

2010-03-31 19:27:05 UTC

CVE-2009-4271 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-4271):
  The Linux kernel 2.6.9 through 2.6.17 on the x86_64 and amd64
  platforms allows local users to cause a denial of service (panic) via
  a 32-bit application that calls mprotect on its Virtual Dynamic
  Shared Object (VDSO) page and then triggers a segmentation fault.