Bug#532722: linux-2.6: CVE-2009-1914 local dos in /proc/iomem on sparc

[Moritz Muehlenhoff <jmm@inutil.org>]

Version: 2.6.29-1

On Wed, Jun 10, 2009 at 06:47:33PM -0400, Michael S Gilbert wrote:
> Package: linux-2.6
> Version: FILLINAFFECTEDVERSION
> Severity: important
> Tags: security , patch
> 
> Hi,
> the following CVE (Common Vulnerabilities & Exposures) id was
> published for linux-2.6.
> 
> CVE-2009-1914[0]:
> | The pci_register_iommu_region function in
> | arch/sparc/kernel/pci_common.c in the Linux kernel before 2.6.29 on
> | the sparc64 platform allows local users to cause a denial of service
> | (system crash) by reading the /proc/iomem file, related to
> | uninitialized pointers and the request_resource function.
> 
> If you fix the vulnerability please also make sure to include the
> CVE id in your changelog entry.

Fixed in 2.6.29.

Cheers,
        Moritz