Owl unaffected by CVE-2018-14634 integer overflow in Linux create_elf_tables()

Solar Designer <[email protected]> Thu, 27 Sep 2018 15:10:26 +0200

Newsgroups	gmane.linux.openwall.user
Message-ID	<[email protected]>

Hi,

FWIW, our OpenVZ/RHEL5-based kernels on Owl are unaffected by
CVE-2018-14634 integer overflow in Linux create_elf_tables():

https://www.openwall.com/lists/oss-security/2018/09/25/4

I lowered MAX_ARG_STRINGS and introduced an extra check into
get_arg_pages() back when we migrated to those kernels in 2010 a few
months before the Owl 3.0 release.

Unfortunately, this hardening change is Owl-specific, and isn't in
OpenVZ upstream.

Alexander