CVE

Id
38370  
CVE No.
CVE-2009-0935  
Status
Candidate  
Description
The inotify_read function in the Linux kernel 2.6.27 to 2.6.27.13, 2.6.28 to 2.6.28.2, and 2.6.29-rc3 allows local users to cause a denial of service (OOPS) via a read with an invalid address to an inotify instance, which causes the device"s event list mutex to be unlocked twice and prevents proper synchronization of a data structure for the inotify instance.  
Phase
Assigned (20090317)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
418619 38370 CVE-2009-0935 MLIST:[linux-kernel] 20090131 [patch 03/43] inotify: clean up inotify_read and fix locking  View
418620 38370 CVE-2009-0935 URL:http://marc.info/?l=linux-kernel&m=123337123501681&w=2  View
418621 38370 CVE-2009-0935 MLIST:[oss-security] 20090306 CVE request: kernel: inotify local DoS  View
418622 38370 CVE-2009-0935 URL:http://www.openwall.com/lists/oss-security/2009/03/06/2  View
418623 38370 CVE-2009-0935 MLIST:[oss-security] 20090318 Re: CVE request: kernel: inotify local DoS  View
418624 38370 CVE-2009-0935 URL:http://www.openwall.com/lists/oss-security/2009/03/18/5  View
418625 38370 CVE-2009-0935 MLIST:[oss-security] 20090319 Re: CVE request: kernel: inotify local DoS  View
418626 38370 CVE-2009-0935 URL:http://www.openwall.com/lists/oss-security/2009/03/19/2  View
418627 38370 CVE-2009-0935 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=488935  View
418628 38370 CVE-2009-0935 CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.3  View
418629 38370 CVE-2009-0935 BID:33624  View
418630 38370 CVE-2009-0935 URL:http://www.securityfocus.com/bid/33624  View
418631 38370 CVE-2009-0935 XF:linux-kernel-inotify-read-dos(49331)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44881 JVNDB-2009-005888 Tor における脆弱性 Tor は、不完全な IPv4 アドレスを有効なものとして扱う、および "仕様準拠" に関する処理に不備があるため、不特定の影響を受ける脆弱性が存在します。 CVE-2009-0939 38370 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005888.html  View