Steffen Froemer

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified) Description: The issue is related to a TCP stream corruption for HTTP requests served by the apache web-server using a cifs mount-point and memory mapping the relevant file. The root cause is similar to the one addressed by a previous commit, where the nested access to the task page frag is caused by a page fault on the user-space memory buffer coming from the cifs file. The page fault handler performs an smb transaction on a different socket, inside the same process context, which modifies the page frag in use by the outer sendmsg call, corrupting the stream. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.