Description
The kiocb_batch_free function in fs/aio.c in the Linux kernel before 3.2.2 allows local users to cause a denial of service (OOPS) via vectors that trigger incorrect iocb management.
References
- https://github.com/torvalds/linux/commit/802f43594d6e4d2ac61086d239153c17873a0428
- 1027085 vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=782696
- [oss-security] 20120117 Re: CVE request: kernel: Unused iocbs in a batch should not be accounted as active mailing-list
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.2
- HPSBGN02970 vendor-advisory