]> git.kernelconcepts.de Git - karo-tx-linux.git/commit
USB: fix DoS in pwc USB video driver (CVE-2007-5093)
authorOliver Neukum <oneukum@suse.de>
Sat, 27 Oct 2007 21:36:46 +0000 (23:36 +0200)
committerAdrian Bunk <bunk@kernel.org>
Thu, 1 Nov 2007 02:57:52 +0000 (03:57 +0100)
commit402a199dab7513f1f38fe3a0e0e8dd72a2de83f5
treeeaa7be117ac0a29a3b8810abfe5bff2e0c0ba382
parent9c456953203c95a8a9f959aa8d650a9be32d3e48
USB: fix DoS in pwc USB video driver (CVE-2007-5093)

The pwc driver has a disconnect method that waits for user space to
close the device. This opens up an opportunity for a DoS attack,
blocking the USB subsystem and making khubd's task busy wait in
kernel space. This patch shifts freeing resources to close if an opened
device is disconnected.

Adrian Bunk:
Backported to 2.6.16.

Signed-off-by: Oliver Neukum <oneukum@suse.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
Signed-off-by: Adrian Bunk <bunk@kernel.org>
drivers/usb/media/pwc/pwc-if.c
drivers/usb/media/pwc/pwc.h