Bug 314689 (CVE-2010-1087)

Summary:	Kernel: nfs_wait_on_request DoS (CVE-2010-1087)
Product:	Gentoo Security	Reporter:	Tomás Touceda (RETIRED) <chiiph>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	hardened-kernel+disabled, kernel
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://git.kernel.org/linus/9f557cd8073104b39528794d44e129331ded649f
Whiteboard:	[linux < 2.6.34]
Package list:		Runtime testing required:	---

Description Tomás Touceda (RETIRED) gentoo-dev

2010-04-11 14:31:42 UTC

CVE-2010-1087 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-1087):
  The nfs_wait_on_request function in fs/nfs/pagelist.c in Linux kernel
  2.6.x through 2.6.33-rc5 allows attackers to cause a denial of
  service (Oops) via unknown vectors related to truncating a file and
  an operation that is not interruptible.