196830 – Linux < 2.6.22 eHCA Memory disclosure (CVE-2007-3850)

Bug 196830 - Linux < 2.6.22 eHCA Memory disclosure (CVE-2007-3850)

Summary: Linux < 2.6.22 eHCA Memory disclosure (CVE-2007-3850)

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Kernel (show other bugs)
Hardware:	All Linux

Importance:	High normal (vote)
Assignee:	Gentoo Security

URL:
Whiteboard:	[linux < 2.6.22][genpatches < 2.6.22-1]
Keywords:

Depends on:
Blocks:

Reported:	2007-10-23 19:32 UTC by Robert Buchholz (RETIRED)
Modified:	2013-09-12 05:00 UTC (History)
CC List:	2 users (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Robert Buchholz (RETIRED) gentoo-dev

2007-10-23 19:32:26 UTC

CVE-2007-3850 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-3850):
  The eHCA driver in Linux kernel 2.6 before 2.6.22, when running on PowerPC,
  does not properly map userspace resources, which allows local users to read
  portions of physical address space.

Comment 1 svrmarty 2009-08-05 16:01:19 UTC

latest update from 2007

please close