Page 1 of 1

grsec: kernel infoleak detected! Please repo

PostPosted: Sun Aug 31, 2014 11:34 pm
by jacekalex
Hi

My new kernel 3.16.1
Code: Select all
Linux version 3.16.1-gr1 (root@localhost) (gcc version 4.7.3 (Gentoo Hardened 4.7.3-r1 p1.3, pie-0.5.5) ) #1 SMP PREEMPT Mon Sep 1 04:48:57 CEST 2014

patches:
Code: Select all
4200_fbcondecor-3.15.patch
grsecurity-3.0-3.16.1-201408312007.patch
random_timestamp.diff

Kernel config:
http://jacekalex.sh.dug.net.pl/logi/kernel_config

dmesg |grep -iA23 infoleak:

Code: Select all
...
[   21.927745] grsec: kernel infoleak detected!  Please report this log to spender@grsecurity.net.
[   21.935000] CPU: 1 PID: 3843 Comm: modprobe Tainted: P        W  OE 3.16.1-gr1 #1
[   21.935012] Hardware name: Gigabyte Technology Co., Ltd. P43-ES3G/P43-ES3G, BIOS F14 08/23/2010
[   21.935015]  ffffffffa5bff076 0000000000000000 0000000000000000 ffffc9000444bb58
[   21.935019]  ffffffffa59645da 0000000000000001 ffff8800c6d57208 ffffc9000444bbe8
[   21.935022]  ffffffffa544f620 ffff8800ca20ffff 0000000000000001 000000000000000a
[   21.935026] Call Trace:
[   21.935034]  [<ffffffffa59645da>] dump_stack+0x4f/0x82
[   21.935039]  [<ffffffffa544f620>] pointer.isra.15+0x3f2/0x438
[   21.935046]  [<ffffffffc0022000>] ? 0xffffffffc0021fff
[   21.935050]  [<ffffffffa50e3100>] ? task_sched_runtime+0x2a/0x98
[   21.935055]  [<ffffffffa595fa9c>] ? __slab_free+0x2e/0x3b3
[   21.935058]  [<ffffffffa544f003>] vsnprintf+0x223/0x44e
[   21.935063]  [<ffffffffa51b0cb0>] ? __kmalloc_track_caller+0x103/0x22b
[   21.935067]  [<ffffffffa54537b4>] ? kasprintf+0x46/0x4e
[   21.935070]  [<ffffffffa5453758>] kvasprintf+0x64/0x7a
[   21.935074]  [<ffffffffc0022000>] ? 0xffffffffc0021fff
[   21.935077]  [<ffffffffa54537b4>] kasprintf+0x46/0x4e
[   21.935081]  [<ffffffffa51a029c>] ? __vunmap+0x9d/0xc0
[   21.935084]  [<ffffffffc0022000>] ? 0xffffffffc0021fff
[   21.935088]  [<ffffffffa50002fb>] do_one_initcall+0x32/0x1a7
[   21.935092]  [<ffffffffa511d738>] load_module+0x1dcd/0x2131
[   21.935096]  [<ffffffffa511a10c>] ? copy_module_from_fd+0x11f/0x11f
[   21.935101]  [<ffffffffc002047b>] ? .LC4+0x7c9/0x7d8 [pppoe]


The system at the kernel 3.16.1 works fine (from 30 minutes), errors in the operation can not be seen, but the log looks quite impressive. ;)
I have 47 of these messages on various modules in dmesg output.
The entire log (all messages from dmesg output):
http://jacekalex.sh.dug.net.pl/logi/infoleak.txt

During the boot before the start init appeared a long list of messages "infoleak".

Cheers
8)

Re: grsec: kernel infoleak detected! Please repo

PostPosted: Mon Sep 01, 2014 12:43 am
by spender
Thanks, it will be fixed in the next patch to be uploaded in a few minutes.

-Brad