Linux Kernel Block Layer CVE-2010-4162/4163 Integer Overflow DoS Vulnerability

Key Information Summary 1. Vulnerability Type - Multiple DoS (Denial of Service) issues exist in the block layer of the Linux kernel. 2. Submitter and Date - Vulnerability report submitter: Dan Rosenberg - Email responder: Josh Bressers - Email date: November 12, 2010, 08:17:08 -0500 (EST) 3. Vulnerability Description - Issue 1 - Type: Integer underflow and overflow - Description: When calculating the number of pages required for a maliciously crafted I/O request, a local user could trigger sequential allocation via device ioctl, leading to an excessive number of pages being allocated and causing system crash. - Submitted fix: https://git.kernel.org/?p=linux/kernel/git/axboe/linux-2.6-block.git;a=commit;h=cb4644cac4a2797afc847e6c92736664d4b0ea34 - Related CVE ID: CVE-2010-4162 - Issue 2 - Type: I/O request with length 0 causes kernel crash - Submitted fix: https://git.kernel.org/?p=linux/kernel/git/axboe/linux-2.6-block.git;a=commit;h=9284bcf4e335e5f18a8bc7b26461c33ab60d0689 - Related CVE ID: CVE-2010-4163 4. Additional Improvements - The patches addressing these identified issues also include improvements to I/O request parameter checking and checks to prevent integer overflow in heap allocations. - Related commits: - https://git.kernel.org/?p=linux/kernel/git/axboe/linux-2.6-block.git;a=commit;h=9f864c80913467312c7b8690e41fb5ebd1b50e92 - https://git.kernel.org/?p=linux/kernel/git/axboe/linux-2.6-block.git;a=commit;h=f3f631c28bc861a931fac283b5bc3585efb8967 5. Notes - The reporter stated that they were unable to successfully exploit these vulnerabilities during testing and is providing this information as a notification. - No specific vulnerability identifier has been assigned, but the reporter is willing to provide one upon request.

Goal Reached Thanks to every supporter — we hit 100%!

Linux Kernel Block Layer CVE-2010-4162/4163 Integer Overflow DoS Vulnerability

More from this source