Bug 385933

Summary:	Kernel: linux >= 2.6.39.1 error within the INET socket monitoring feature (CVE-2011-2484)
Product:	Gentoo Security	Reporter:	Michael Harrison <n0idx80>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	minor	CC:	genkernel
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://secunia.com/advisories/44754/
Whiteboard:	[linux >= 2.6.39.1]
Package list:		Runtime testing required:	---

Description Michael Harrison 2011-10-06 20:22:25 UTC

An error within the INET socket monitoring feature when auditing the bytecode contained in certain netlink messages can be exploited to cause the kernel to enter an infinite loop via an INET_DIAG_BC_JMP opcode with the "yes" variable set to "0".

Comment 1 Michael Harrison 2012-01-31 11:31:04 UTC

Original Advisory:
http://thread.gmane.org/gmane.linux.network/197206/focus=197386

Solution:
Fixed in version version 2.6.39.3 and 2.6.35.14

*** This bug has been marked as a duplicate of bug 374631 ***