Upstream information
Description
The compat_alloc_user_space functions in include/asm/compat.h files in the Linux kernel before 2.6.36-rc4-git2 on 64-bit platforms do not properly allocate the userspace memory required for the 32-bit compatibility layer, which allows local users to gain privileges by leveraging the ability of the compat_mc_getsockopt function (aka the MCAST_MSFILTER getsockopt support) to control a certain length value, related to a "stack pointer underflow" issue, as exploited in the wild in September 2010.NVD CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)
Novell/SUSE information
Note from the SUSE Security Team
We are affected by this problem, for SUSE Linux Enterprise Server 9, 10, 11, all service packs, and also openSUSE 11.1 - 11.3. Only the x86_64 (AMD64/EM64T) architecture is affected. Updates have been released. Novell Bugzilla entry: 639709, 641575 SUSE Security Advisories:- SUSE-SA:2010:041, published Fri, 17 Sep 2010 14:00:00 +0000
- SUSE-SA:2010:043, published Thu, 23 Sep 2010 15:00:00 +0000
- SUSE-SA:2010:044, published Thu, 23 Sep 2010 15:00:00 +0000
- SUSE-SA:2010:045, published Thu, 23 Sep 2010 15:00:00 +0000
- SUSE-SA:2010:046, published Thu, 23 Sep 2010 15:00:00 +0000
- SUSE-SA:2010:047, published Thu, 23 Sep 2010 16:00:00 +0000
- SUSE-SA:2010:050, published Wed, 13 Oct 2010 17:00:00 +0000
- SUSE-SA:2011:007, published Mon, 07 Feb 2011 09:00:00 +0000
- SUSE-SR:2010:017, published Tue, 21 Sep 2010 11:00:00 +0000
- openSUSE-SU-2010:0720-1, published Wed, 13 Oct 2010 18:08:19 +0200 (CEST)
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|---|---|
| SUSE Linux Enterprise Server 10 SP2 for IBM zSeries 64bit |
| sles10-sp2-ltss.s390x ZYPP Patch Nr: 7538 |
| SLE 11 SP1 DEBUGINFO |
| sle11-sp1-hae.x86-64 sled11-sp1.x86-64 sles11-sp1-vmware.x86-64 sles11-sp1.x86-64 SAT Patch Nr: 3280 |
| SUSE Linux Enterprise High Availability Extension 11 SP1 |
| sle11-sp1-hae.x86-64 sled11-sp1.x86-64 sles11-sp1-vmware.x86-64 sles11-sp1.x86-64 SAT Patch Nr: 3280 |
| SUSE Linux Enterprise Desktop 11 SP1 |
| sle11-sp1-hae.x86-64 sled11-sp1.x86-64 sles11-sp1-vmware.x86-64 sles11-sp1.x86-64 SAT Patch Nr: 3280 |
| SUSE Linux Enterprise Server 11 SP1 for VMware |
| sle11-sp1-hae.x86-64 sled11-sp1.x86-64 sles11-sp1-vmware.x86-64 sles11-sp1.x86-64 SAT Patch Nr: 3280 |
| SUSE Linux Enterprise Server 11 SP1 |
| sle11-sp1-hae.x86-64 sled11-sp1.x86-64 sles11-sp1-vmware.x86-64 sles11-sp1.x86-64 SAT Patch Nr: 3280 |
| SLE 11 SERVER Unsupported Extras |
| Builds SAT Patch Nr: 3149 |
| SLE 11 SP1 DEBUGINFO |
| sles11-sp1.s390x sle11-sp1-hae.s390x SAT Patch Nr: 3276 |
| SUSE Linux Enterprise High Availability Extension 11 SP1 |
| sles11-sp1.s390x sle11-sp1-hae.s390x SAT Patch Nr: 3276 |
| SUSE Linux Enterprise Server 11 SP1 |
| sles11-sp1.s390x sle11-sp1-hae.s390x SAT Patch Nr: 3276 |
| SUSE Linux Enterprise Server 10 SP3 |
| sles10-sp3.s390x ZYPP Patch Nr: 7170 |
| SUSE Linux Enterprise Server 10 SP3 DEBUGINFO |
| sle10-sp3-sdk.ppc sles10-sp3-debuginfo.ppc sles10-sp3.ppc ZYPP Patch Nr: 7162 |
| SUSE Linux Enterprise SDK 10 SP3 |
| sle10-sp3-sdk.ppc sles10-sp3-debuginfo.ppc sles10-sp3.ppc ZYPP Patch Nr: 7162 |
| SUSE Linux Enterprise Server 10 SP3 |
| sle10-sp3-sdk.ppc sles10-sp3-debuginfo.ppc sles10-sp3.ppc ZYPP Patch Nr: 7162 |
| SUSE Linux Enterprise Server 10 SP3 DEBUGINFO |
| sle10-sp3-sdk.ia64 sles10-sp3-debuginfo.ia64 sles10-sp3.ia64 ZYPP Patch Nr: 7161 |
| SUSE Linux Enterprise SDK 10 SP3 |
| sle10-sp3-sdk.ia64 sles10-sp3-debuginfo.ia64 sles10-sp3.ia64 ZYPP Patch Nr: 7161 |
| SUSE Linux Enterprise Server 10 SP3 |
| sle10-sp3-sdk.ia64 sles10-sp3-debuginfo.ia64 sles10-sp3.ia64 ZYPP Patch Nr: 7161 |
| SUSE Linux Enterprise 11 GA DEBUGINFO |
| sles11.s390x sle11-hae.s390x SAT Patch Nr: 3163 |
| SUSE Linux Enterprise High Availability Extension 11 |
| sles11.s390x sle11-hae.s390x SAT Patch Nr: 3163 |
| SUSE Linux Enterprise Server 11 GA |
| sles11.s390x sle11-hae.s390x SAT Patch Nr: 3163 |
| SLE 11 SERVER Unsupported Extras |
| Builds SAT Patch Nr: 3279 |
| SUSE Linux Enterprise 11 GA DEBUGINFO |
| sles11.ia64 sle11-hae.ia64 SAT Patch Nr: 3161 |
| SUSE Linux Enterprise High Availability Extension 11 |
| sles11.ia64 sle11-hae.ia64 SAT Patch Nr: 3161 |
| SUSE Linux Enterprise Server 11 GA |
| sles11.ia64 sle11-hae.ia64 SAT Patch Nr: 3161 |
| Open Enterprise Server |
| sles9-oes.x86 YOU Patch Nr: 12650 |
| SLE 11 SERVER Unsupported Extras |
| Builds SAT Patch Nr: 3277 |
| SLE 11 SERVER Unsupported Extras |
| Builds SAT Patch Nr: 3167 |
| SLE 11 SERVER Unsupported Extras |
| Builds SAT Patch Nr: 3152 |
| SUSE Linux Enterprise 11 GA DEBUGINFO |
| sles11.ppc sle11-hae.ppc SAT Patch Nr: 3162 |
| SUSE Linux Enterprise High Availability Extension 11 |
| sles11.ppc sle11-hae.ppc SAT Patch Nr: 3162 |
| SUSE Linux Enterprise Server 11 GA |
| sles11.ppc sle11-hae.ppc SAT Patch Nr: 3162 |
| SLE 11 SP1 DEBUGINFO |
| sle11-sp1-hae.ia64 sles11-sp1.ia64 SAT Patch Nr: 3145 |
| SUSE Linux Enterprise High Availability Extension 11 SP1 |
| sle11-sp1-hae.ia64 sles11-sp1.ia64 SAT Patch Nr: 3145 |
| SUSE Linux Enterprise Server 11 SP1 |
| sle11-sp1-hae.ia64 sles11-sp1.ia64 SAT Patch Nr: 3145 |
| SLE 11 SP1 DEBUGINFO |
| sled11-sp1.x86 sle11-sp1-hae.x86 sles11-sp1-vmware.x86 sles11-sp1.x86 SAT Patch Nr: 3144 |
| SUSE Linux Enterprise High Availability Extension 11 SP1 |
| sled11-sp1.x86 sle11-sp1-hae.x86 sles11-sp1-vmware.x86 sles11-sp1.x86 SAT Patch Nr: 3144 |
| SUSE Linux Enterprise Desktop 11 SP1 |
| sled11-sp1.x86 sle11-sp1-hae.x86 sles11-sp1-vmware.x86 sles11-sp1.x86 SAT Patch Nr: 3144 |
| SUSE Linux Enterprise Server 11 SP1 for VMware |
| sled11-sp1.x86 sle11-sp1-hae.x86 sles11-sp1-vmware.x86 sles11-sp1.x86 SAT Patch Nr: 3144 |
| SUSE Linux Enterprise Server 11 SP1 |
| sled11-sp1.x86 sle11-sp1-hae.x86 sles11-sp1-vmware.x86 sles11-sp1.x86 SAT Patch Nr: 3144 |
| SUSE Linux Enterprise 11 GA DEBUGINFO |
| sles11.x86 sle11-hae.x86 sled11.x86 SAT Patch Nr: 3171 |
| SUSE Linux Enterprise High Availability Extension 11 |
| sles11.x86 sle11-hae.x86 sled11.x86 SAT Patch Nr: 3171 |
| SUSE Linux Enterprise Desktop 11 GA |
| sles11.x86 sle11-hae.x86 sled11.x86 SAT Patch Nr: 3171 |
| SUSE Linux Enterprise Server 11 GA |
| sles11.x86 sle11-hae.x86 sled11.x86 SAT Patch Nr: 3171 |
| openSUSE 11.1 |
| |
| openSUSE 11.1 |
| |
| SLE 11 SP1 DEBUGINFO |
| sles11-sp1.ppc sle11-sp1-hae.ppc SAT Patch Nr: 3287 |
| SUSE Linux Enterprise High Availability Extension 11 SP1 |
| sles11-sp1.ppc sle11-sp1-hae.ppc SAT Patch Nr: 3287 |
| SUSE Linux Enterprise Server 11 SP1 |
| sles11-sp1.ppc sle11-sp1-hae.ppc SAT Patch Nr: 3287 |
| SLE 11 SERVER Unsupported Extras |
| Builds SAT Patch Nr: 3278 |
| SLE 11 SERVER Unsupported Extras |
| Builds SAT Patch Nr: 3282 |
| SUSE Linux Enterprise Server 10 SP2 for x86 |
| sles10-sp2-ltss.x86 ZYPP Patch Nr: 7537 |
| SLE 11 SERVER Unsupported Extras |
| Builds SAT Patch Nr: 3165 |
| SLE 11 SERVER Unsupported Extras |
| Builds SAT Patch Nr: 3169 |
| openSUSE 11.3 |
| |
| openSUSE 11.3 |
| |
| SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T |
| sles10-sp2-ltss.x86-64 ZYPP Patch Nr: 7539 |
| SUSE Linux Enterprise 11 GA DEBUGINFO |
| sles11.x86-64 sled11.x86-64 sle11-hae.x86-64 SAT Patch Nr: 3164 |
| SUSE Linux Enterprise High Availability Extension 11 |
| sles11.x86-64 sled11.x86-64 sle11-hae.x86-64 SAT Patch Nr: 3164 |
| SUSE Linux Enterprise Desktop 11 GA |
| sles11.x86-64 sled11.x86-64 sle11-hae.x86-64 SAT Patch Nr: 3164 |
| SUSE Linux Enterprise Server 11 GA |
| sles11.x86-64 sled11.x86-64 sle11-hae.x86-64 SAT Patch Nr: 3164 |
| SUSE Linux Enterprise Real Time 11 SP1 |
| x86-64 SAT Patch Nr: 3859 |
| SLE 11 SERVER Unsupported Extras |
| Builds SAT Patch Nr: 3166 |
| SLE 11 SP1 DEBUGINFO |
| sle11-sp1-hae.ppc sles11-sp1.ppc SAT Patch Nr: 3146 |
| SUSE Linux Enterprise High Availability Extension 11 SP1 |
| sle11-sp1-hae.ppc sles11-sp1.ppc SAT Patch Nr: 3146 |
| SUSE Linux Enterprise Server 11 SP1 |
| sle11-sp1-hae.ppc sles11-sp1.ppc SAT Patch Nr: 3146 |
| SUSE Linux Enterprise Server 10 SP3 DEBUGINFO |
| sle10-sp3-sdk.s390x sles10-sp3.s390x sles10-sp3-debuginfo.s390x ZYPP Patch Nr: 7163 |
| SUSE Linux Enterprise SDK 10 SP3 |
| sle10-sp3-sdk.s390x sles10-sp3.s390x sles10-sp3-debuginfo.s390x ZYPP Patch Nr: 7163 |
| SUSE Linux Enterprise Server 10 SP3 |
| sle10-sp3-sdk.s390x sles10-sp3.s390x sles10-sp3-debuginfo.s390x ZYPP Patch Nr: 7163 |
| SLE 11 SP1 DEBUGINFO |
| sled11-sp1.x86 sles11-sp1.x86 sle11-sp1-hae.x86 sles11-sp1-vmware.x86 SAT Patch Nr: 3284 |
| SUSE Linux Enterprise High Availability Extension 11 SP1 |
| sled11-sp1.x86 sles11-sp1.x86 sle11-sp1-hae.x86 sles11-sp1-vmware.x86 SAT Patch Nr: 3284 |
| SUSE Linux Enterprise Desktop 11 SP1 |
| sled11-sp1.x86 sles11-sp1.x86 sle11-sp1-hae.x86 sles11-sp1-vmware.x86 SAT Patch Nr: 3284 |
| SUSE Linux Enterprise Server 11 SP1 for VMware |
| sled11-sp1.x86 sles11-sp1.x86 sle11-sp1-hae.x86 sles11-sp1-vmware.x86 SAT Patch Nr: 3284 |
| SUSE Linux Enterprise Server 11 SP1 |
| sled11-sp1.x86 sles11-sp1.x86 sle11-sp1-hae.x86 sles11-sp1-vmware.x86 SAT Patch Nr: 3284 |
| SLE 11 SP1 DEBUGINFO |
| sle11-sp1-hae.ia64 sles11-sp1.ia64 SAT Patch Nr: 3281 |
| SUSE Linux Enterprise High Availability Extension 11 SP1 |
| sle11-sp1-hae.ia64 sles11-sp1.ia64 SAT Patch Nr: 3281 |
| SUSE Linux Enterprise Server 11 SP1 |
| sle11-sp1-hae.ia64 sles11-sp1.ia64 SAT Patch Nr: 3281 |
| SLE 11 SP1 DEBUGINFO |
| sles11-sp1.s390x sle11-sp1-hae.s390x SAT Patch Nr: 3147 |
| SUSE Linux Enterprise High Availability Extension 11 SP1 |
| sles11-sp1.s390x sle11-sp1-hae.s390x SAT Patch Nr: 3147 |
| SUSE Linux Enterprise Server 11 SP1 |
| sles11-sp1.s390x sle11-sp1-hae.s390x SAT Patch Nr: 3147 |
| SLE 11 SERVER Unsupported Extras |
| Builds SAT Patch Nr: 3153 |
| SUSE Linux Enterprise Desktop 10 SP3 for AMD64 and Intel EM64T |
| sle10-sp3-sdk.x86-64 sles10-sp3.x86-64 sles10-sp3-debuginfo.x86-64 sled10-sp3.x86-64 ZYPP Patch Nr: 7164 |
| SUSE Linux Enterprise Server 10 SP3 DEBUGINFO |
| sle10-sp3-sdk.x86-64 sles10-sp3.x86-64 sles10-sp3-debuginfo.x86-64 sled10-sp3.x86-64 ZYPP Patch Nr: 7164 |
| SUSE Linux Enterprise SDK 10 SP3 SUSE Linux Enterprise Server for SAP 10 SP3 |
| sle10-sp3-sdk.x86-64 sles10-sp3.x86-64 sles10-sp3-debuginfo.x86-64 sled10-sp3.x86-64 ZYPP Patch Nr: 7164 |
| SUSE Linux Enterprise SDK 10 SP3 |
| sle10-sp3-sdk.x86-64 sles10-sp3.x86-64 sles10-sp3-debuginfo.x86-64 sled10-sp3.x86-64 ZYPP Patch Nr: 7164 |
| SUSE CORE 9 for AMD64 and Intel EM64T |
| Builds YOU Patch Nr: 12814 |
| SLE 11 SERVER Unsupported Extras |
| Builds SAT Patch Nr: 3150 |
| SLE 11 SERVER Unsupported Extras |
| Builds SAT Patch Nr: 3168 |
| SUSE Linux Enterprise Desktop 10 SP3 for x86 |
| sled10-sp3.x86 sle10-sp3-sdk.x86 sles10-sp3-debuginfo.x86 sles10-sp3.x86 ZYPP Patch Nr: 7160 |
| SUSE Linux Enterprise Server 10 SP3 DEBUGINFO |
| sled10-sp3.x86 sle10-sp3-sdk.x86 sles10-sp3-debuginfo.x86 sles10-sp3.x86 ZYPP Patch Nr: 7160 |
| SUSE Linux Enterprise SDK 10 SP3 |
| sled10-sp3.x86 sle10-sp3-sdk.x86 sles10-sp3-debuginfo.x86 sles10-sp3.x86 ZYPP Patch Nr: 7160 |
| SUSE Linux Enterprise Server 10 SP3 |
| sled10-sp3.x86 sle10-sp3-sdk.x86 sles10-sp3-debuginfo.x86 sles10-sp3.x86 ZYPP Patch Nr: 7160 |
| SLE 11 SERVER Unsupported Extras |
| Builds SAT Patch Nr: 3151 |
| openSUSE 11.2 |
| |
| openSUSE 11.2 |
| |
| SLE 11 SP1 DEBUGINFO |
| sles11-sp1.x86-64 sles11-sp1-vmware.x86-64 sle11-sp1-hae.x86-64 sled11-sp1.x86-64 SAT Patch Nr: 3148 |
| SUSE Linux Enterprise High Availability Extension 11 SP1 |
| sles11-sp1.x86-64 sles11-sp1-vmware.x86-64 sle11-sp1-hae.x86-64 sled11-sp1.x86-64 SAT Patch Nr: 3148 |
| SUSE Linux Enterprise Desktop 11 SP1 |
| sles11-sp1.x86-64 sles11-sp1-vmware.x86-64 sle11-sp1-hae.x86-64 sled11-sp1.x86-64 SAT Patch Nr: 3148 |
| SUSE Linux Enterprise Server 11 SP1 for VMware |
| sles11-sp1.x86-64 sles11-sp1-vmware.x86-64 sle11-sp1-hae.x86-64 sled11-sp1.x86-64 SAT Patch Nr: 3148 |
| SUSE Linux Enterprise Server 11 SP1 |
| sles11-sp1.x86-64 sles11-sp1-vmware.x86-64 sle11-sp1-hae.x86-64 sled11-sp1.x86-64 SAT Patch Nr: 3148 |
| SLE 11 SERVER Unsupported Extras |
| Builds SAT Patch Nr: 3283 |
| SUSE Linux Enterprise Server RT Solution 10 for x86 |
| slert10-sp3.x86 slert10-sp3.x86-64 ZYPP Patch Nr: 7211 |
| SUSE Linux Enterprise Server RT Solution 10 for AMD64 and Intel EM64T |
| slert10-sp3.x86 slert10-sp3.x86-64 ZYPP Patch Nr: 7211 |
