Public bug reported:

numactl sometimes crashes when enumerating hardware:

root@node1:~# numactl --hardware
available: 648 nodes (0-647)
Segmentation fault

Further analysis shows that libnuma is using an uninitialised pointer,
which value depends on program layout. When layout is sufficiently
different, the pointer is non-NULL and the library parses the data
pointed to as a bitmap, crashing.

Therefore, it is possible to leverage this in an exploit.

I have fixed the issue upstream:
https://github.com/numactl/numactl/commit/6a7c2cf3f00e32082a1ada300cc585740e2b4bbd

** Affects: numactl (Ubuntu)
     Importance: Undecided
         Status: New

** Information type changed from Private Security to Public

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to numactl in Ubuntu.
https://bugs.launchpad.net/bugs/1441388

Title:
  numactl crashes with segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/numactl/+bug/1441388/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

Reply via email to