mbox series

[t,x,z,a,b,0/1] Fix for CVE-2018-5344

Message ID 20180131164800.20056-1-benjamin.romer@canonical.com
Headers show
Series Fix for CVE-2018-5344 | expand

Message

Benjamin M Romer Jan. 31, 2018, 4:47 p.m. UTC 
CVE-2018-5344:

In the Linux kernel through 4.14.13, drivers/block/loop.c mishandles 
lo_release serialization, which allows attackers to cause a denial of 
service (__lock_acquire use-after-free) or possibly have unspecified 
other impact.

Linus Torvalds (1):
  loop: fix concurrent lo_open/lo_release

 drivers/block/loop.c | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

Comments

Seth Forshee Jan. 31, 2018, 4:57 p.m. UTC | #1 
On Wed, Jan 31, 2018 at 11:47:59AM -0500, Benjamin M Romer wrote:
> CVE-2018-5344:
> 
> In the Linux kernel through 4.14.13, drivers/block/loop.c mishandles 
> lo_release serialization, which allows attackers to cause a denial of 
> service (__lock_acquire use-after-free) or possibly have unspecified 
> other impact.

Kleber sent a patch for this a couple of days ago.