kernel-packages team mailing list archive

[Mathew Hodson <mathew.hodson@xxxxxxxxx>]

** CVE removed: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2010-4249

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/732700

Title:
  apparmor_parser triggers a kernel panic

Status in linux package in Ubuntu:
  Invalid
Status in linux-mvl-dove package in Ubuntu:
  Invalid
Status in linux source package in Lucid:
  Fix Released
Status in linux-mvl-dove source package in Lucid:
  Fix Released
Status in linux source package in Maverick:
  Invalid
Status in linux-mvl-dove source package in Maverick:
  Fix Released

Bug description:
  SRU Justification:

      Impact: kernel panic when loading a malformed apparmor profile.
      Fix: see attached patch.
      Testcase: /etc/init.d/apparmor restart

  ===

  While loading a new profile, in case of a malformed one,
  policy.c::aa_interface_replace_profiles() tries to free an ERR_PTR
  leading to a panic.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/732700/+subscriptions