Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 202235 - <=sys-kernel/*-sources-2.6.23.X hrtimer:overflow for large relative timeouts (CVE-2007-5966)
Summary: <=sys-kernel/*-sources-2.6.23.X hrtimer:overflow for large relative timeouts ...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Kernel (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Gentoo Security
URL: http://www.spinics.net/lists/kernel/m...
Whiteboard: [linux < 2.6.23.10] [genpatches < 2.6...
Keywords:
Depends on:
Blocks:
 
Reported: 2007-12-14 11:27 UTC by Lars Hartmann
Modified: 2013-09-12 04:56 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Lars Hartmann 2007-12-14 11:27:22 UTC
Relative hrtimers with a large timeout value might end up as negative
timer values, when the current time is added in hrtimer_start().

This in turn is causing the clockevents_set_next() function to set an
huge timeout and sleep for quite a long time when we have a clock
source which is capable of long sleeps like HPET. With PIT this almost
goes unnoticed as the maximum delta is ~27ms. The non-hrt/nohz code
sorts this out in the next timer interrupt, so we never noticed that
problem which has been there since the first day of hrtimers.

This bug became more apparent in 2.6.24 which activates HPET on more
hardware.

Solution:
apply the folowing patch: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=62f0f61e6673e67151a7c8c0f9a09c7ea43fe2b5

Reproducible: Always
Comment 1 Krzysztof Pawlik (RETIRED) gentoo-dev 2007-12-14 19:11:38 UTC
Fixed in 2.6.23.10: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.10
Comment 2 Mike Pagano gentoo-dev 2008-03-19 20:20:39 UTC
Included in >=gentoo-sources-2.6.23-r4
Comment 3 Mike Pagano gentoo-dev 2008-03-19 23:54:21 UTC
Sorry for the bugspam, I'm going to add back kernel alias until we figure out what were doing.
Comment 4 svrmarty 2009-08-05 15:59:01 UTC
latest update from 2008

please close