Bug#532722: linux-2.6: CVE-2009-1914 local dos in /proc/iomem on sparc

[Michael S Gilbert <michael.s.gilbert@gmail.com>]

Package: linux-2.6
Version: FILLINAFFECTEDVERSION
Severity: important
Tags: security , patch

Hi,
the following CVE (Common Vulnerabilities & Exposures) id was
published for linux-2.6.

CVE-2009-1914[0]:
| The pci_register_iommu_region function in
| arch/sparc/kernel/pci_common.c in the Linux kernel before 2.6.29 on
| the sparc64 platform allows local users to cause a denial of service
| (system crash) by reading the /proc/iomem file, related to
| uninitialized pointers and the request_resource function.

If you fix the vulnerability please also make sure to include the
CVE id in your changelog entry.

Patches available [1].

For further information see:

[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1914
    http://security-tracker.debian.net/tracker/CVE-2009-1914
[1] http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=192d7a4667c6d11d1a174ec4cad9a3c5d5f9043c