Bug 514878 (CVE-2014-4508)

Summary:	Kernel: x86_32: BUG in syscall auditing (CVE-2014-4508)
Product:	Gentoo Security	Reporter:	Agostino Sarubbo <ago>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	normal	CC:	kernel
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Agostino Sarubbo gentoo-dev

2014-06-24 09:07:51 UTC

CVE-2014-4508 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-4508):
  arch/x86/kernel/entry_32.S in the Linux kernel through 3.15.1 on 32-bit 
  x86 platforms, when syscall auditing is enabled and the sep CPU feature 
  flag is set, allows local users to cause a denial of service (OOPS and 
  system crash) via an invalid syscall number, as demonstrated by number 
  1000.

Comment 1 GLSAMaker/CVETool Bot gentoo-dev

2014-08-10 21:51:11 UTC

CVE-2014-4508 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-4508):
  arch/x86/kernel/entry_32.S in the Linux kernel through 3.15.1 on 32-bit x86
  platforms, when syscall auditing is enabled and the sep CPU feature flag is
  set, allows local users to cause a denial of service (OOPS and system crash)
  via an invalid syscall number, as demonstrated by number 1000.

Comment 2 SpanKY gentoo-dev

2014-08-12 04:44:26 UTC

dupe of bug 513308 ?

Comment 3 Sergey Popov gentoo-dev

2014-08-17 07:48:20 UTC

yes

*** This bug has been marked as a duplicate of bug 513308 ***