Re: IMPORTANT: Security hole in kernels < 2.6.32-rc6

2009-11-21 Thread Bruce Dubbs
Bryan Kadzban wrote: > Bruce Dubbs wrote: > http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.31.y.git;a=commitdiff;h=c40ca2aab8a3d3ba213b7b174cb2c90bd3b51235 > > Look vaguely familiar? :-) See also that particular commit ID (search > the page for it) in: > > http://www.kernel.org/pub

Re: IMPORTANT: Security hole in kernels < 2.6.32-rc6

2009-11-21 Thread Bryan Kadzban
Bruce Dubbs wrote: > William Immendorf wrote: >> I've recently stumbled upon an security flaw in Linux. It affects >> Linux < 2.6.32-rc6. The problem is that when using the >> pipe_read_open(), pipe_write_open() or pipe_rdwr_open() functions >> while releasing a mutex (mutual exclusion) too earl

Re: IMPORTANT: Security hole in kernels < 2.6.32-rc6

2009-11-21 Thread Bruce Dubbs
William Immendorf wrote: > I've recently stumbled upon an security flaw in Linux. It affects > Linux < 2.6.32-rc6. The problem is that when using the > pipe_read_open(), pipe_write_open() or pipe_rdwr_open() functions > while releasing a mutex (mutual exclusion) too early, in certain > conditions,