CVE-2015-1805 pipe: iovec overrun leading to memory corruption の解決方法
Issue
- pipe: iovec が超過したためメモリーが破損しました。
- CVE-2015-1805 は何を示していますか?
- システムがパニックし、以下のメッセージが表示されました。
RIP [<ffffffff8116f0d4>] s_show+0xe4/0x330
RIP:0010:[<ffffffff8128f028>] [<ffffffff8128f028>] memset+0x8/0xc0
RIP:0010:[<ffffffff81167274>] [<ffffffff81167274>] cache_alloc_refill+0x1e4/0x240
RIP:0010:[<ffffffff8117023b>] [<ffffffff8117023b>] kmem_cache_free+0x7b/0x2b0
list_del corruption. next->prev should be ffff880476113000, but was ffff880476112569
WARNING: at lib/list_debug.c:51 list_del+0x8d/0xa0() (Not tainted)
BUG: unable to handle kernel NULL pointer dereference at (null)
general protection fault:0000 [#1] SMP
kernel BUG at mm/slab.c:3069!
invalid opcode:0000 [#1] SMP
Environment
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 5
- Red Hat Enterprise MGR v2
- THP (Transparent Huge Pages) が有効な NUMA 環境
- splunkd / splunk-optimize
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.
