196120 – Linux <2.6.19-rc4 Hugetlb local DoS (CVE-2007-4133)

Bug 196120 - Linux <2.6.19-rc4 Hugetlb local DoS (CVE-2007-4133)

Summary: Linux <2.6.19-rc4 Hugetlb local DoS (CVE-2007-4133)

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Kernel (show other bugs)
Hardware:	All Linux

Importance:	High normal (vote)
Assignee:	Gentoo Security

URL:
Whiteboard:	[linux < 2.6.19][genpatches < 2.6.19-1]
Keywords:

Depends on:
Blocks:

Reported:	2007-10-17 00:37 UTC by Robert Buchholz (RETIRED)
Modified:	2013-09-12 05:01 UTC (History)
CC List:	2 users (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Robert Buchholz (RETIRED) gentoo-dev

2007-10-17 00:37:54 UTC

CVE-2007-4133:
  The (1) hugetlb_vmtruncate_list and (2) hugetlb_vmtruncate functions in
  fs/hugetlbfs/inode.c in the Linux kernel before 2.6.19-rc4 perform certain
  prio_tree calculations using HPAGE_SIZE instead of PAGE_SIZE units, which
  allows local users to cause a denial of service (panic) via unspecified
  vectors.

Comment 1 svrmarty 2009-08-05 16:01:43 UTC

latest update from 2007

please close