180743 – Kernel: VFAT IOCTLs Denial of Service (CVE-2007-2878)

Bug 180743 - Kernel: VFAT IOCTLs Denial of Service (CVE-2007-2878)

Summary: Kernel: VFAT IOCTLs Denial of Service (CVE-2007-2878)

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Kernel (show other bugs)
Hardware:	All Linux

Importance:	High normal (vote)
Assignee:	Gentoo Security

URL:	http://cve.mitre.org/cgi-bin/cvename....
Whiteboard:	[linux < 2.6.21.2][gp < 2.6.21-3]
Keywords:

Depends on:
Blocks:

Reported:	2007-06-03 15:19 UTC by Sune Kloppenborg Jeppesen (RETIRED)
Modified:	2013-09-03 03:46 UTC (History)
CC List:	0 users

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev

2007-06-03 15:19:04 UTC

The VFAT compat ioctls in the Linux kernel before 2.6.21.2, when run on a 64-bit system, allow local users to corrupt a kernel_dirent struct and cause a denial of service (system crash) via unknown vectors.

Comment 1 unnamedrambler 2008-03-21 19:41:01 UTC

[linux < 2.6.21.2] 041f08ecb28db5be31e6de339c7abb3fe369ec53

also on 2.6.22 as c483bab099cb89e92b7cad94a52fcdaf37e56657

[gp < 2.6.21-3]