grsecurity forums

Kernel BUG is in "stable" 2.6.19.2-2.1.10 grsec kernel.

"kernel bug at mm/mmap.c:2200!

"funny" bug-video

Fixed in "test kernel" 2.6.22.6-grsec (2.1.11).

"backported" Patch from 2.6.22-grsec :

Code: Select all

diff -Nru linux-2.6.19.2/mm/memory.c urto/linux-2.6.19.2/mm/memory.c
--- linux-2.6.19.2/mm/memory.c  2007-09-17 20:32:38.000000000 +0200
+++ urto/linux-2.6.19.2/mm/memory.c     2007-09-17 20:28:21.000000000 +0200
@@ -1052,7 +1052,7 @@
                        continue;
                }

-               if (!vma || (vma->vm_flags & (VM_IO | VM_PFNMAP))
+               if (!vma || start < vma->vm_start || (vma->vm_flags & (VM_IO | VM_PFNMAP))
                                || !(vm_flags & vma->vm_flags))
                        return i ? : -EFAULT;