| 2011-06-20 16:52:30 |
Andy Whitcroft |
bug |
|
|
added bug |
| 2011-06-20 16:52:32 |
Andy Whitcroft |
tags |
|
kernel-cve-tracking-bug |
|
| 2011-06-20 16:52:33 |
Andy Whitcroft |
security vulnerability |
no |
yes |
|
| 2011-06-20 16:52:34 |
Andy Whitcroft |
cve linked |
|
2010-4526 |
|
| 2011-06-20 16:52:40 |
Andy Whitcroft |
nominated for series |
|
Ubuntu Oneiric |
|
| 2011-06-20 16:52:40 |
Andy Whitcroft |
bug task added |
|
linux (Ubuntu Oneiric) |
|
| 2011-06-20 16:52:40 |
Andy Whitcroft |
bug task added |
|
linux-fsl-imx51 (Ubuntu Oneiric) |
|
| 2011-06-20 16:52:40 |
Andy Whitcroft |
bug task added |
|
linux-lts-backport-maverick (Ubuntu Oneiric) |
|
| 2011-06-20 16:52:40 |
Andy Whitcroft |
bug task added |
|
linux-mvl-dove (Ubuntu Oneiric) |
|
| 2011-06-20 16:52:40 |
Andy Whitcroft |
bug task added |
|
linux-ti-omap4 (Ubuntu Oneiric) |
|
| 2011-06-20 16:52:46 |
Andy Whitcroft |
nominated for series |
|
Ubuntu Natty |
|
| 2011-06-20 16:52:46 |
Andy Whitcroft |
bug task added |
|
linux (Ubuntu Natty) |
|
| 2011-06-20 16:52:46 |
Andy Whitcroft |
bug task added |
|
linux-fsl-imx51 (Ubuntu Natty) |
|
| 2011-06-20 16:52:46 |
Andy Whitcroft |
bug task added |
|
linux-lts-backport-maverick (Ubuntu Natty) |
|
| 2011-06-20 16:52:46 |
Andy Whitcroft |
bug task added |
|
linux-mvl-dove (Ubuntu Natty) |
|
| 2011-06-20 16:52:46 |
Andy Whitcroft |
bug task added |
|
linux-ti-omap4 (Ubuntu Natty) |
|
| 2011-06-20 16:52:51 |
Andy Whitcroft |
nominated for series |
|
Ubuntu Maverick |
|
| 2011-06-20 16:52:52 |
Andy Whitcroft |
bug task added |
|
linux (Ubuntu Maverick) |
|
| 2011-06-20 16:52:52 |
Andy Whitcroft |
bug task added |
|
linux-fsl-imx51 (Ubuntu Maverick) |
|
| 2011-06-20 16:52:52 |
Andy Whitcroft |
bug task added |
|
linux-lts-backport-maverick (Ubuntu Maverick) |
|
| 2011-06-20 16:52:52 |
Andy Whitcroft |
bug task added |
|
linux-mvl-dove (Ubuntu Maverick) |
|
| 2011-06-20 16:52:52 |
Andy Whitcroft |
bug task added |
|
linux-ti-omap4 (Ubuntu Maverick) |
|
| 2011-06-20 16:52:57 |
Andy Whitcroft |
nominated for series |
|
Ubuntu Lucid |
|
| 2011-06-20 16:52:58 |
Andy Whitcroft |
bug task added |
|
linux (Ubuntu Lucid) |
|
| 2011-06-20 16:52:58 |
Andy Whitcroft |
bug task added |
|
linux-fsl-imx51 (Ubuntu Lucid) |
|
| 2011-06-20 16:52:58 |
Andy Whitcroft |
bug task added |
|
linux-lts-backport-maverick (Ubuntu Lucid) |
|
| 2011-06-20 16:52:58 |
Andy Whitcroft |
bug task added |
|
linux-mvl-dove (Ubuntu Lucid) |
|
| 2011-06-20 16:52:58 |
Andy Whitcroft |
bug task added |
|
linux-ti-omap4 (Ubuntu Lucid) |
|
| 2011-06-20 16:53:06 |
Andy Whitcroft |
nominated for series |
|
Ubuntu Hardy |
|
| 2011-06-20 16:53:06 |
Andy Whitcroft |
bug task added |
|
linux (Ubuntu Hardy) |
|
| 2011-06-20 16:53:06 |
Andy Whitcroft |
bug task added |
|
linux-fsl-imx51 (Ubuntu Hardy) |
|
| 2011-06-20 16:53:06 |
Andy Whitcroft |
bug task added |
|
linux-lts-backport-maverick (Ubuntu Hardy) |
|
| 2011-06-20 16:53:06 |
Andy Whitcroft |
bug task added |
|
linux-mvl-dove (Ubuntu Hardy) |
|
| 2011-06-20 16:53:06 |
Andy Whitcroft |
bug task added |
|
linux-ti-omap4 (Ubuntu Hardy) |
|
| 2011-06-20 16:55:46 |
Andy Whitcroft |
linux (Ubuntu Hardy): status |
New |
Confirmed |
|
| 2011-06-20 16:56:07 |
Andy Whitcroft |
linux (Ubuntu Lucid): status |
New |
Fix Released |
|
| 2011-06-20 16:57:06 |
Andy Whitcroft |
linux (Ubuntu Maverick): status |
New |
Invalid |
|
| 2011-06-20 16:57:17 |
Andy Whitcroft |
linux (Ubuntu Natty): status |
New |
Invalid |
|
| 2011-06-20 16:57:29 |
Andy Whitcroft |
linux (Ubuntu Oneiric): status |
New |
Invalid |
|
| 2011-06-20 17:00:57 |
Andy Whitcroft |
linux-fsl-imx51 (Ubuntu Hardy): status |
New |
Invalid |
|
| 2011-06-20 17:01:11 |
Andy Whitcroft |
linux-fsl-imx51 (Ubuntu Lucid): status |
New |
Confirmed |
|
| 2011-06-20 17:01:24 |
Andy Whitcroft |
linux-fsl-imx51 (Ubuntu Maverick): status |
New |
Invalid |
|
| 2011-06-20 17:01:43 |
Andy Whitcroft |
linux-fsl-imx51 (Ubuntu Natty): status |
New |
Invalid |
|
| 2011-06-20 17:01:54 |
Andy Whitcroft |
linux-fsl-imx51 (Ubuntu Oneiric): status |
New |
Invalid |
|
| 2011-06-20 17:02:09 |
Andy Whitcroft |
linux-lts-backport-maverick (Ubuntu Hardy): status |
New |
Invalid |
|
| 2011-06-20 17:03:06 |
Andy Whitcroft |
linux-lts-backport-maverick (Ubuntu Lucid): status |
New |
Invalid |
|
| 2011-06-20 17:03:19 |
Andy Whitcroft |
linux-lts-backport-maverick (Ubuntu Maverick): status |
New |
Invalid |
|
| 2011-06-20 17:03:31 |
Andy Whitcroft |
linux-lts-backport-maverick (Ubuntu Natty): status |
New |
Invalid |
|
| 2011-06-20 17:03:43 |
Andy Whitcroft |
linux-lts-backport-maverick (Ubuntu Oneiric): status |
New |
Invalid |
|
| 2011-06-20 17:03:57 |
Andy Whitcroft |
linux-mvl-dove (Ubuntu Hardy): status |
New |
Invalid |
|
| 2011-06-20 17:04:08 |
Andy Whitcroft |
linux-mvl-dove (Ubuntu Lucid): status |
New |
Invalid |
|
| 2011-06-20 17:04:20 |
Andy Whitcroft |
linux-mvl-dove (Ubuntu Maverick): status |
New |
Invalid |
|
| 2011-06-20 17:04:33 |
Andy Whitcroft |
linux-mvl-dove (Ubuntu Natty): status |
New |
Invalid |
|
| 2011-06-20 17:04:46 |
Andy Whitcroft |
linux-mvl-dove (Ubuntu Oneiric): status |
New |
Invalid |
|
| 2011-06-20 17:04:58 |
Andy Whitcroft |
linux-ti-omap4 (Ubuntu Hardy): status |
New |
Invalid |
|
| 2011-06-20 17:05:11 |
Andy Whitcroft |
linux-ti-omap4 (Ubuntu Lucid): status |
New |
Invalid |
|
| 2011-06-20 17:05:25 |
Andy Whitcroft |
linux-ti-omap4 (Ubuntu Maverick): status |
New |
Invalid |
|
| 2011-06-20 17:05:36 |
Andy Whitcroft |
linux-ti-omap4 (Ubuntu Natty): status |
New |
Invalid |
|
| 2011-06-20 17:05:48 |
Andy Whitcroft |
linux-ti-omap4 (Ubuntu Oneiric): status |
New |
Invalid |
|
| 2011-06-20 17:17:04 |
Andy Whitcroft |
description |
Placeholder |
Fixed-by: 50b5d6ad63821cea324a5a7a19854d4de1a0a819
commit 50b5d6ad63821cea324a5a7a19854d4de1a0a819
Author: Vlad Yasevich <vladislav.yasevich@hp.com>
Date: Thu May 6 00:56:07 2010 -0700
sctp: Fix a race between ICMP protocol unreachable and connect()
ICMP protocol unreachable handling completely disregarded
the fact that the user may have locked the socket. It proceeded
to destroy the association, even though the user may have
held the lock and had a ref on the association. This resulted
in the following:
Attempt to release alive inet socket f6afcc00
=========================
[ BUG: held lock freed! ]
-------------------------
somenu/2672 is freeing memory f6afcc00-f6afcfff, with a lock still held
there!
(sk_lock-AF_INET){+.+.+.}, at: [<c122098a>] sctp_connect+0x13/0x4c
1 lock held by somenu/2672:
#0: (sk_lock-AF_INET){+.+.+.}, at: [<c122098a>] sctp_connect+0x13/0x4c
stack backtrace:
Pid: 2672, comm: somenu Not tainted 2.6.32-telco #55
Call Trace:
[<c1232266>] ? printk+0xf/0x11
[<c1038553>] debug_check_no_locks_freed+0xce/0xff
[<c10620b4>] kmem_cache_free+0x21/0x66
[<c1185f25>] __sk_free+0x9d/0xab
[<c1185f9c>] sk_free+0x1c/0x1e
[<c1216e38>] sctp_association_put+0x32/0x89
[<c1220865>] __sctp_connect+0x36d/0x3f4
[<c122098a>] ? sctp_connect+0x13/0x4c
[<c102d073>] ? autoremove_wake_function+0x0/0x33
[<c12209a8>] sctp_connect+0x31/0x4c
[<c11d1e80>] inet_dgram_connect+0x4b/0x55
[<c11834fa>] sys_connect+0x54/0x71
[<c103a3a2>] ? lock_release_non_nested+0x88/0x239
[<c1054026>] ? might_fault+0x42/0x7c
[<c1054026>] ? might_fault+0x42/0x7c
[<c11847ab>] sys_socketcall+0x6d/0x178
[<c10da994>] ? trace_hardirqs_on_thunk+0xc/0x10
[<c1002959>] syscall_call+0x7/0xb
This was because the sctp_wait_for_connect() would aqcure the socket
lock and then proceed to release the last reference count on the
association, thus cause the fully destruction path to finish freeing
the socket.
The simplest solution is to start a very short timer in case the socket
is owned by user. When the timer expires, we can do some verification
and be able to do the release properly.
Signed-off-by: Vlad Yasevich <vladislav.yasevich@hp.com>
Signed-off-by: David S. Miller <davem@davemloft.net> |
|
| 2011-06-20 18:20:00 |
Andy Whitcroft |
linux (Ubuntu Hardy): status |
Confirmed |
In Progress |
|
| 2011-06-20 18:20:00 |
Andy Whitcroft |
linux (Ubuntu Hardy): assignee |
|
Andy Whitcroft (apw) |
|
| 2011-06-20 18:20:15 |
Andy Whitcroft |
linux-fsl-imx51 (Ubuntu Lucid): status |
Confirmed |
In Progress |
|
| 2011-06-20 18:20:15 |
Andy Whitcroft |
linux-fsl-imx51 (Ubuntu Lucid): assignee |
|
Andy Whitcroft (apw) |
|
| 2011-06-22 14:02:21 |
Tim Gardner |
linux (Ubuntu Hardy): status |
In Progress |
Fix Committed |
|
| 2011-06-22 14:05:12 |
Tim Gardner |
linux-fsl-imx51 (Ubuntu Lucid): status |
In Progress |
Fix Committed |
|
| 2011-07-14 16:24:30 |
Launchpad Janitor |
linux (Ubuntu Hardy): status |
Fix Committed |
Fix Released |
|
| 2011-07-14 16:24:30 |
Launchpad Janitor |
cve linked |
|
2010-4076 |
|
| 2011-07-14 16:24:30 |
Launchpad Janitor |
cve linked |
|
2010-4077 |
|
| 2011-07-14 16:24:30 |
Launchpad Janitor |
cve linked |
|
2010-4247 |
|
| 2011-07-14 16:24:30 |
Launchpad Janitor |
cve linked |
|
2011-0726 |
|
| 2011-07-14 16:24:30 |
Launchpad Janitor |
cve linked |
|
2011-1163 |
|
| 2011-07-14 16:24:30 |
Launchpad Janitor |
cve linked |
|
2011-1577 |
|
| 2011-07-14 16:24:30 |
Launchpad Janitor |
cve linked |
|
2011-1746 |
|
| 2015-01-21 14:48:29 |
Andy Whitcroft |
linux-fsl-imx51 (Ubuntu Lucid): status |
Fix Committed |
Fix Released |
|
