Red Hat Linux Kernel mremap() Vulnerability (CVE-2010-0291) Fix Advisory

Critical Vulnerability Information Vulnerability Overview Bug ID: Bug 556703 (CVE-2010-0291) Description: Kernel: Fix issue in do_mremap() Status: CLOSED ERRATA Aliases: CVE-2010-0291 Reporting and Updates Reported: 2010-01-19 06:22 UTC Last Closed: 2013-04-12 15:49:15 UTC Impact Product: Security Response Component: Vulnerability Hardware: All Operating System: Linux Priority: High Severity: High Related Links and Patches Links: This issue has numerous related excerpts and patches for reference, including various variants of mremap(), get_unmapped_area(), and mmap(). Patch Description: Fixes include, but are not limited to, checks on mremap() and expansion parameters, simulated support for hugetlb mappings, etc. Patches and Vulnerability Fixes Associated Fixed Versions: No specific version listed, indicating the vulnerability was fixed in subsequent releases. Cloned From: Notes The Red Hat Product Security Team noted that upstream commits fixing this issue could trigger user-triggerable kernel panics on supported systems. Patch Series Description: Bestiary support commands transitioned to consistently use get_unmapped_area() and cleaned up mmap/mremap code implementations. Official Statement Risk Assessment: The risk of fixing this bug outweighs its severity in terms of security risk management. Red Hat Fix Status: This issue has been fixed in Red Hat Enterprise Linux 5, including fixes and vulnerability advisories released in products such as MRG.

Goal Reached Thanks to every supporter — we hit 100%!

Red Hat Linux Kernel mremap() Vulnerability (CVE-2010-0291) Fix Advisory