Description
Race condition in the hvc_close function in drivers/char/hvc_console.c in the Linux kernel before 2.6.34 allows local users to cause a denial of service or possibly have unspecified other impact by closing a Hypervisor Virtual Console device, related to the hvc_open and hvc_remove functions.
References
- [oss-security] 20100419 Re: kernel: hvc_console: Fix race between hvc_close and hvc_remove mailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=568621
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=320718ee074acce5ffced6506cb51af1388942aa
- [oss-security] 20100304 kernel: hvc_console: Fix race between hvc_close and hvc_remove mailing-list
- [oss-security] 20100630 Re: kernel: hvc_console: Fix race between hvc_close and hvc_remove mailing-list
- [oss-security] 20100707 Re: kernel: hvc_console: Fix race between hvc_close and hvc_remove mailing-list
- [oss-security] 20100417 Re: kernel: hvc_console: Fix race between hvc_close and hvc_remove mailing-list
- [oss-security] 20100417 Re: kernel: hvc_console: Fix race between hvc_close and hvc_remove mailing-list
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34
- [linux-kernel] 20100303 [PATCH v2] hvc_console: Fix race between hvc_close and hvc_remove mailing-list
- [oss-security] 20100706 CVE Request: kernel: hvc_console: Fix race between hvc_close and hvc_remove mailing-list
- http://patchwork.kernel.org/patch/83353/
- [oss-security] 20100419 Re: kernel: hvc_console: Fix race between hvc_close and hvc_remove mailing-list