CVE-2013-4312 (NVD)

2016-02-08

The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by sending each descriptor over a UNIX socket before closing it, related to net/unix/af_unix.c and net/unix/garbage.c.

Products Linux_kernel, Linux
Type Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119)
First patch https://github.com/torvalds/linux/commit/712f4aad406bb1ed67f3f98d04c044191f0ff593
Relevant file/s • ./include/linux/sched.h (modified, +1)
• ./net/unix/af_unix.c (modified, +20, -4)
• ./net/unix/garbage.c (modified, +8, -5)
Links • http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176464.html
• http://www.ubuntu.com/usn/USN-2932-1
• http://www.debian.org/security/2016/dsa-3448
• http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html
• http://www.ubuntu.com/usn/USN-2929-2

linux - Tree: 712f4aad40

(? files)

Filter Settings
Files
Navigation
Patch data:

(on by default)

Patched area: