Bug 332037 (CVE-2010-1451)

Summary:	Kernel: TSB I-TLB on SPARC fails to implement a non-executable stack (CVE-2010-1451)
Product:	Gentoo Security	Reporter:	Alex Legler (RETIRED) <a3li>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	hardened-kernel+disabled, kernel
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.33
Whiteboard:	[ linux < 2.6.33 ]
Package list:		Runtime testing required:	---

Description Alex Legler (RETIRED) archtester

2010-08-10 12:46:01 UTC

CVE-2010-1451 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-1451):
  The TSB I-TLB load implementation in arch/sparc/kernel/tsb.S in the
  Linux kernel before 2.6.33 on the SPARC platform does not properly
  obtain the value of a certain _PAGE_EXEC_4U bit and consequently does
  not properly implement a non-executable stack, which makes it easier
  for context-dependent attackers to exploit stack-based buffer
  overflows via a crafted application.