[Bug 1441388] [NEW] numactl crashes with segfault

Daniel J Blueman daniel at quora.org
Wed Apr 8 00:00:46 UTC 2015


Public bug reported:

numactl sometimes crashes when enumerating hardware:

root at node1:~# numactl --hardware
available: 648 nodes (0-647)
Segmentation fault

Further analysis shows that libnuma is using an uninitialised pointer,
which value depends on program layout. When layout is sufficiently
different, the pointer is non-NULL and the library parses the data
pointed to as a bitmap, crashing.

Therefore, it is possible to leverage this in an exploit.

I have fixed the issue upstream:
https://github.com/numactl/numactl/commit/6a7c2cf3f00e32082a1ada300cc585740e2b4bbd

** Affects: numactl (Ubuntu)
     Importance: Undecided
         Status: New

** Information type changed from Private Security to Public

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to numactl in Ubuntu.
https://bugs.launchpad.net/bugs/1441388

Title:
  numactl crashes with segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/numactl/+bug/1441388/+subscriptions



More information about the Ubuntu-server-bugs mailing list