Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 460768 (CVE-2013-1826)

Summary: Kernel : xfrm_user: return error pointer instead of NULL (CVE-2013-1826)
Product: Gentoo Security Reporter: Agostino Sarubbo <ago>
Component: KernelAssignee: Gentoo Kernel Security <security-kernel>
Severity: normal CC: kernel
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Package list:
Runtime testing required: ---

Description Agostino Sarubbo gentoo-dev 2013-03-08 13:25:33 UTC
From $URL :

Linux kernel built with XFRM framework support is vulnerable to a NULL pointer
dereference flaw. It occurs while accessing XFRM state via xfrm_state_netlink

A privileged(CAP_NET_ADMIN) user/program could use this flaw to crash systems,
resulting in DoS.

Upstream fix:

Comment 1 Christopher Díaz Riveros (RETIRED) gentoo-dev Security 2018-04-04 19:26:21 UTC
There are no longer any 2.x or <3.5.7 kernels available in the repository with
the exception of sys-kernel/xbox-sources which is unsupported by security.