linux/arch
Al Viro 330d57fb98 [PATCH] Fix sysctl unregistration oops (CVE-2005-2709)
You could open the /proc/sys/net/ipv4/conf/<if>/<whatever> file, then
wait for interface to go away, try to grab as much memory as possible in
hope to hit the (kfreed) ctl_table.  Then fill it with pointers to your
function.  Then do read from file you've opened and if you are lucky,
you'll get it called as ->proc_handler() in kernel mode.

So this is at least an Oops and possibly more.  It does depend on an
interface going away though, so less of a security risk than it would
otherwise be.

Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
2005-11-08 17:57:30 -08:00
..
alpha [PATCH] jiffies_64 cleanup 2005-10-30 17:37:25 -08:00
arm Merge with ARM SMP tree 2005-11-08 22:43:44 +00:00
arm26 [PATCH] consolidate sys_ptrace() 2005-11-07 07:53:42 -08:00
cris [PATCH] kfree cleanup: arch 2005-11-07 07:54:06 -08:00
frv [PATCH] consolidate sys_ptrace() 2005-11-07 07:53:42 -08:00
h8300 [PATCH] consolidate sys_ptrace() 2005-11-07 07:53:42 -08:00
i386 Merge master.kernel.org:/pub/scm/linux/kernel/git/davej/cpufreq 2005-11-07 13:28:20 -08:00
ia64 Auto-update from upstream 2005-11-07 09:05:22 -08:00
m32r Merge master.kernel.org:/home/rmk/linux-2.6-drvmodel 2005-10-31 07:32:56 -08:00
m68k [PATCH] m68k: fix-up schedule_timeout() usage 2005-11-07 07:53:56 -08:00
m68knommu [PATCH] m68knommu: move some platform irq support out of irq.h 2005-11-07 08:00:47 -08:00
mips Merge branch 'upstream' of git://ftp.linux-mips.org/pub/scm/upstream-linus 2005-11-07 11:15:23 -08:00
parisc [PATCH] consolidate sys_ptrace() 2005-11-07 07:53:42 -08:00
powerpc [PATCH] ppc64: Fix the lazy icache/dcache code for non-RAM pages 2005-11-08 13:07:50 +11:00
ppc [PATCH] ppc: Fix ARCH=ppc build with xmon 2005-11-08 11:19:48 +11:00
ppc64 [PATCH] Memory Add Fixes for ppc64 2005-11-08 11:20:00 +11:00
s390 [PATCH] Fix sysctl unregistration oops (CVE-2005-2709) 2005-11-08 17:57:30 -08:00
sh [PATCH] consolidate sys_ptrace() 2005-11-07 07:53:42 -08:00
sh64 [PATCH] consolidate sys_ptrace() 2005-11-07 07:53:42 -08:00
sparc [SPARC]: Kill remaining kbio.h references. 2005-11-07 14:12:21 -08:00
sparc64 [SPARC64] mm: update get_user_insn comment 2005-11-08 10:00:55 -08:00
um [PATCH] kfree cleanup: arch 2005-11-07 07:54:06 -08:00
v850 [PATCH] consolidate sys_ptrace() 2005-11-07 07:53:42 -08:00
x86_64 [PATCH] unexport phys_proc_id and cpu_core_id 2005-11-07 07:54:09 -08:00
xtensa [PATCH] consolidate sys_ptrace() 2005-11-07 07:53:42 -08:00