Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.kernel > #50744

Bug#796036: linux-image-3.16.0-4-amd64: concurrent msync triggers NULL pointer dereference

From Ben Hutchings <ben@decadent.org.uk>
Newsgroups linux.debian.bugs.dist, linux.debian.kernel
Subject Bug#796036: linux-image-3.16.0-4-amd64: concurrent msync triggers NULL pointer dereference
Date 2015-09-10 16:00 +0200
Message-ID <q7ayl-3dh-1@gated-at.bofh.it> (permalink)
References <pYTuF-5ua-1@gated-at.bofh.it>
Organization linux.* mail to news gateway

Cross-posted to 2 groups.

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Control: tag -1 security patch

On Tue, 2015-08-18 at 20:05 +0200, Xavier Chantry wrote:
> Package: src:linux
> Version: 3.16.7-ckt11-1
> Severity: important
> 
> Using Debian 3.16.7-ckt4-3 and a simple test case, we were able to reproduce a
> kernel bug in msync system call.
[...]

I can reproduce this too.  I also found a similar problem with
madvise(..., MADV_REMOVE).  The attached patch (against
3.16.7-ckt11-1+deb8u3) should fix them both.

Ben.

-- 
Ben Hutchings
The most exhausting thing in life is being insincere. - Anne Morrow Lindberg

Back to linux.debian.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Bug#796036: linux-image-3.16.0-4-amd64: concurrent msync triggers NULL pointer dereference Xavier Chantry <xavier.chantry@intersec.com> - 2015-08-18 20:10 +0200
  Bug#796036: linux-image-3.16.0-4-amd64: concurrent msync triggers NULL pointer dereference Xavier Chantry <xavier.chantry@intersec.com> - 2015-08-19 19:00 +0200
  Bug#796036: linux-image-3.16.0-4-amd64: concurrent msync triggers NULL pointer dereference Ben Hutchings <ben@decadent.org.uk> - 2015-09-10 16:00 +0200
    Bug#796036: linux-image-3.16.0-4-amd64: concurrent msync triggers NULL pointer dereference Ben Hutchings <ben@decadent.org.uk> - 2015-09-10 16:30 +0200
      Bug#796036: linux-image-3.16.0-4-amd64: concurrent msync triggers NULL pointer dereference Ben Hutchings <ben@decadent.org.uk> - 2015-09-10 18:50 +0200
      Bug#796036: linux-image-3.16.0-4-amd64: concurrent msync triggers NULL pointer dereference Xavier Chantry <xavier.chantry@intersec.com> - 2015-09-10 18:50 +0200
  Processed: Re: Bug#796036: linux-image-3.16.0-4-amd64: concurrent  msync triggers NULL pointer dereference owner@bugs.debian.org (Debian Bug Tracking System) - 2015-09-10 16:00 +0200

csiph-web