I suspect that this recvmsg is triggering the error that is emitted:

    2775  recvmsg(9, 0x7fffbff554f0, 0)     = -1 EINVAL (Invalid
argument)

This might well indicate that this subprocess is using msg ipc to
communicate the connected socket back to the unpriviledged master
process.  This could well occur if the bindsock process is passing an
overly large message buffer, which is technically erroneous.  This
became fatal in the commit below in mainline:

  1661bf364ae9c506bc8795fef70d1532931be1e8
  Author: Dan Carpenter <[email protected]>
  Date:   Thu Oct 3 00:27:20 2013 +0300

    net: heap overflow in __audit_sockaddr

This commit was applied to the various versions listed above as part of
various stable updates.

There has subsequently been a fix for this commit which softens the
effect for badly behaving callers:

  1661bf364ae9c506bc8795fef70d1532931be1e8
  Author: Dan Carpenter <[email protected]>
  Date:   Thu Oct 3 00:27:20 2013 +0300

    net: heap overflow in __audit_sockaddr

This commit has recently hit v3.2.x stable but is not yet in any
released kernel.

** Changed in: linux-lts-quantal (Ubuntu)
       Status: New => In Progress

** Changed in: linux-lts-quantal (Ubuntu)
     Assignee: (unassigned) => Andy Whitcroft (apw)

** Changed in: linux-lts-quantal (Ubuntu)
   Importance: Undecided => Medium

** Summary changed:

- IBM Domino 'bindsock' cannot bind to ports <1024 since recent kernel 3.5.0-45
+ IBM Domino 'bindsock' cannot bind to ports <1024 since recent kernel 
3.5.0-45,68

** Summary changed:

- IBM Domino 'bindsock' cannot bind to ports <1024 since recent kernel 
3.5.0-45,68
+ IBM Domino 'bindsock' cannot bind to ports <1024 since recent kernel 
3.5.0-45.68

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1269053

Title:
  IBM Domino 'bindsock' cannot bind to ports <1024 since recent kernel
  3.5.0-45.68

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-lts-quantal/+bug/1269053/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to