Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 170857 (CVE-2006-4814) - Kernel: Mincore function does not properly lock access to user space (CVE-2006-4814)
Summary: Kernel: Mincore function does not properly lock access to user space (CVE-200...
Status: RESOLVED FIXED
Alias: CVE-2006-4814
Product: Gentoo Security
Classification: Unclassified
Component: Kernel (show other bugs)
Hardware: All Linux
: High normal
Assignee: Gentoo Security
URL:
Whiteboard: [linux < 2.6.16.38][linux >= 2.6.17 <...
Keywords:
Depends on:
Blocks:
 
Reported: 2007-03-14 12:21 UTC by Sune Kloppenborg Jeppesen (RETIRED)
Modified: 2013-09-05 03:19 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2007-03-14 12:21:51 UTC 
The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock.

Fixed in 2.6.20-rc2. And the 2.6.19.2 contains a backport of it.
Comment 1 unnamedrambler 2008-03-07 18:52:15 UTC 
proposed metadata:
[linux < 2.6.16.38] 7c876d457b5c7e949032a4ac7aec64af0136d52a
[linux > 2.6.17 < 2.6.18.8] d84ad2cb50ba8c92df32ae6df47d413e5877e6ea
[linux > 2.6.19 < 2.6.19.2] e26353af7096103cec474473cbd81dc4190bba77

[gp < 2.6.18-10]
[gp > 2.6.18-10 < 2.6.19-5]
Comment 2 unnamedrambler 2008-03-07 19:17:06 UTC 
metadata correction:
[linux > 2.6.17 < 2.6.18.8] should be [linux >= 2.6.17 < 2.6.18.8]
[linux > 2.6.19 < 2.6.19.2] should be [linux >= 2.6.19 < 2.6.19.2]