REDHAT-BUG-681260
First published: Tue Mar 01 2011(Updated: )
Description of problem: Struct ca is copied from userspace. It is not checked whether the "device" field is NULL terminated. This potentially leads to BUG() inside of alloc_netdev_mqs() and/or information leak by creating a device with a name made of contents of kernel stack. References: <a href="http://seclists.org/oss-sec/2011/q1/309">http://seclists.org/oss-sec/2011/q1/309</a> <a href="https://lkml.org/lkml/2011/2/14/50">https://lkml.org/lkml/2011/2/14/50</a> Acknowledgements: Red Hat would like to thank Vasiliy Kulikov of Openwall for reporting this issue.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat Linux |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://seclists.org/oss-sec/2011/q1/309
- https://lkml.org/lkml/2011/2/14/50
- http://git.kernel.org/linus/43629f8f5ea32a998d06d1bb41eefa0e821ff573
- https://rhn.redhat.com/errata/RHSA-2011-0500.html
- https://rhn.redhat.com/errata/RHSA-2011-0498.html
- https://rhn.redhat.com/errata/RHSA-2011-0833.html
- https://bugzilla.redhat.com/show_bug.cgi?id=681260
Frequently Asked Questions
What is the severity of REDHAT-BUG-681260?
The severity of REDHAT-BUG-681260 relates to potential information leakage and system instability due to improper handling of device names.
How do I fix REDHAT-BUG-681260?
To fix REDHAT-BUG-681260, ensure that the 'device' field is properly NULL terminated when copied from userspace.
What are the potential consequences of REDHAT-BUG-681260?
The consequences of REDHAT-BUG-681260 include kernel crashes and unintended exposure of sensitive kernel stack data.
In which versions of Red Hat Linux is REDHAT-BUG-681260 present?
REDHAT-BUG-681260 is present in specific Red Hat Linux kernel versions; users should verify against their installed kernel version.
Is REDHAT-BUG-681260 actively being addressed by Red Hat?
Yes, REDHAT-BUG-681260 has been acknowledged by Red Hat and is being addressed in future kernel updates.
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2011-1079
- agent/source
- agent/severity
- agent/references
- agent/description
- agent/event
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/red hat
- canonical/red hat linux