Description
The bpf_int_jit_compile function in arch/x86/net/bpf_jit_comp.c in the Linux kernel before 4.0.6 allows local users to cause a denial of service (system crash) by creating a packet filter and then loading crafted BPF instructions that trigger late convergence by the JIT compiler.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://github.com/torvalds/linux/commit/3f7352bf21f8fd7ba3e2fcef9488756f188e12be ↗
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00011.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html ↗
- http://www.openwall.com/lists/oss-security/2015/06/23/2 ↗
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html ↗
- http://www.ubuntu.com/usn/USN-2680-1 ↗
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3f7352bf21f8fd7ba3e2fcef9488756f188e12be ↗
- http://www.ubuntu.com/usn/USN-2679-1 ↗
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html ↗
- http://rhn.redhat.com/errata/RHSA-2015-1778.html ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=1233615 ↗
- http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.6 ↗
- http://www.securitytracker.com/id/1033046 ↗
- http://www.debian.org/security/2015/dsa-3329 ↗
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html ↗
- http://www.ubuntu.com/usn/USN-2684-1 ↗
- http://www.ubuntu.com/usn/USN-2681-1 ↗
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html ↗
- http://www.ubuntu.com/usn/USN-2683-1 ↗
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00010.html ↗
- http://www.securityfocus.com/bid/75356 ↗
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00023.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00007.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html ↗
- https://support.f5.com/csp/article/K05211147 ↗