Bug 506440 (CVE-2014-2672)

Summary:	Kernel: Race condition in the ath_tx_aggr_sleep (CVE-2014-2672)
Product:	Gentoo Security	Reporter:	Agostino Sarubbo <ago>
Component:	Kernel	Assignee:	Gentoo Kernel Security <security-kernel>
Status:	RESOLVED FIXED
Severity:	normal	CC:	kernel
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Agostino Sarubbo gentoo-dev

2014-04-01 10:43:13 UTC

CVE-2014-2672 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-2672):

Race condition in the ath_tx_aggr_sleep function in drivers/net/wireless/ath/ath9k/xmit.c in the Linux 
kernel before 3.13.7 allows remote attackers to cause a denial of service (system crash) via a large 
amount of network traffic that triggers certain list deletions.

Comment 1 GLSAMaker/CVETool Bot gentoo-dev

2014-08-10 21:56:52 UTC

CVE-2014-2672 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-2672):
  Race condition in the ath_tx_aggr_sleep function in
  drivers/net/wireless/ath/ath9k/xmit.c in the Linux kernel before 3.13.7
  allows remote attackers to cause a denial of service (system crash) via a
  large amount of network traffic that triggers certain list deletions.

Comment 2 John Helmert III archtester

2021-10-25 00:06:19 UTC

Patch in mainline 3.14 onwards