huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2011-3208: cyrus-imapd: nntpd buffer overflow in split_wildmats()
Component: cyrus-imapd
Severity: Important
Public date: 2011-09-08T00:00:00+00:00

Stack-based buffer overflow in the split_wildmats function in nntpd.c in nntpd in Cyrus IMAP Server before 2.3.17 and 2.4.x before 2.4.11 allows remote attackers to execute arbitrary code via a crafted NNTP command.


Affected upstream versions: n/a
Upstream repository: https://git.cyrusimap.org/cyrus-imapd
Upstream fix commit: 3244c18c928fa331f6927e2b8146abe90feafddd
CVE-2011-3209: kernel: panic occurs when clock_gettime() is called
Component: kernel
Severity: Moderate
Public date: 2008-05-01T00:00:00+00:00

The div_long_long_rem implementation in include/asm-x86/div64.h in the Linux kernel before 2.6.26 on the x86 platform allows local users to cause a denial of service (Divide Error Fault and panic) via a clock_gettime system call.

Statement: This issue did not affect the Linux kernels as shipped with Red Hat Enterprise Linux 4, 6, and Red Hat Enterprise MRG, as they either do not have the sample_to_timespec() function, or have already backported upstream commit f8bd2258, which addresses this issue. It was addressed in Red Hat Enterprise Linux 5 via https://rhn.redhat.com/errata/RHSA-2011-1386.html.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.26
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: f8bd2258e2d520dff28c855658bd24bdafb5102d
CVE-2011-3323: (ospf6d): Stack-based buffer overflow while decoding Link State Update packet with malformed Inter Area Prefix LSA
Component: (ospf6d)
Severity: Low
CWE: CWE-121 (Stack-based Buffer Overflow)
Public date: 2011-09-26T00:00:00+00:00

The OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (out-of-bounds memory access and daemon crash) via a Link State Update message with an invalid IPv6 prefix length.


Affected upstream versions: n/a
Fixed upstream versions: quagga_0_99_19_release
Upstream repository: https://code.quagga.net/quagga.git
Upstream fix commit: abc7ef44ca05493500865ce81f7b84f5c4eb6594
CVE-2011-3324: (ospf6d): Denial of service by decoding malformed Database Description packet headers
Component: (ospf6d)
Severity: Low
Public date: 2011-09-26T00:00:00+00:00

The ospf6_lsa_is_changed function in ospf6_lsa.c in the OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via trailing zero values in the Link State Advertisement (LSA) header list of an IPv6 Database Description message.


Affected upstream versions: n/a
Fixed upstream versions: quagga_0_99_19_release
Upstream repository: https://code.quagga.net/quagga.git
Upstream fix commit: 09395e2a0e93b2cf4258cb1de91887948796bb68
CVE-2011-3325: (ospfd): Denial of service by decoding too short Hello packet or Hello packet with invalid OSPFv2 header type
Component: (ospfd)
Severity: Low
Public date: 2011-09-26T00:00:00+00:00

ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via (1) a 0x0a type field in an IPv4 packet header or (2) a truncated IPv4 Hello packet.


Affected upstream versions: n/a
Fixed upstream versions: quagga_0_99_19_release
Upstream repository: https://code.quagga.net/quagga.git
Upstream fix commit: 61ab0301606053192f45c188bc48afc837518770
CVE-2011-3326: (ospfd): Denial of service by decoding Link State Update LSAs of unknown type
Component: (ospfd)
Severity: Low
Public date: 2011-09-26T00:00:00+00:00

The ospf_flood function in ospf_flood.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via an invalid Link State Advertisement (LSA) type in an IPv4 Link State Update message.


Affected upstream versions: n/a
Fixed upstream versions: quagga_0_99_19_release
Upstream repository: https://code.quagga.net/quagga.git
Upstream fix commit: 6b161fc12a15aba8824c84d1eb38e529aaf70769
CVE-2011-3327: (bgpd): Heap-based buffer overflow by decoding BGP UPDATE message with unknown AS_PATH attributes
Component: (bgpd)
Severity: Moderate
CWE: CWE-122 (Heap-based Buffer Overflow)
Public date: 2011-09-26T00:00:00+00:00

Heap-based buffer overflow in the ecommunity_ecom2str function in bgp_ecommunity.c in bgpd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by sending a crafted BGP UPDATE message over IPv4.


Affected upstream versions: n/a
Fixed upstream versions: quagga_0_99_19_release
Upstream repository: https://code.quagga.net/quagga.git
Upstream fix commit: 94431dbc753171b48b5c6806af97fd690813b00a
CVE-2011-3346: qemu: local DoS with SCSI CD-ROM
Component: qemu
Severity: Moderate
Public date: 2011-09-07T00:00:00+00:00

Buffer overflow in hw/scsi-disk.c in the SCSI subsystem in QEMU before 0.15.2, as used by Xen, might allow local guest users with permission to access the CD-ROM to cause a denial of service (guest crash) via a crafted SAI READ CAPACITY SCSI command.  NOTE: this is only a vulnerability when root has manually modified certain permissions or ACLs.

Statement: This issue only affects qemu as shipped with Red Hat Enterprise Linux 5 xen packages. The versions of the qemu/kvm as shipped with Red Hat Enterprise Linux 5 are not affected.

Affected upstream versions: n/a
Fixed upstream versions: for-upstream-meson-0.57
Upstream repository: https://github.com/bonzini/qemu
Upstream fix commit: 103b40f51e4012b3b0ad20f615562a1806d7f49a
CVE-2011-3347: kernel: be2net: promiscuous mode and non-member VLAN packets DoS
Component: kernel
Severity: Moderate
Public date: 2011-10-20T00:00:00+00:00

A certain Red Hat patch to the be2net implementation in the kernel package before 2.6.32-218.el6 on Red Hat Enterprise Linux (RHEL) 6, when promiscuous mode is enabled, allows remote attackers to cause a denial of service (system crash) via non-member VLAN packets.

Statement: This has been addressed in Red Hat Enterprise Linux 5 via https://rhn.redhat.com/errata/RHSA-2011-1386.html. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 4 as it did not include support for ServerEngines' 10Gbps network adapter - BladeEngine. This has been addressed in Red Hat Enterprise Linux 6 via https://rhn.redhat.com/errata/RHSA-2011-1530.html. A future kernel update in Red Hat Enterprise MRG may address this issue.

Affected upstream versions: n/a
Upstream repository: https://oss.oracle.com/git/redpatch.git
Upstream fix commit: fadca7bdc43b02f518585d9547019966415cadfd
CVE-2011-3353: kernel: fuse: check size of FUSE_NOTIFY_INVAL_ENTRY message
Component: kernel
Severity: Moderate
Public date: 2011-07-28T00:00:00+00:00

Buffer overflow in the fuse_notify_inval_entry function in fs/fuse/dev.c in the Linux kernel before 3.1 allows local users to cause a denial of service (BUG_ON and system crash) by leveraging the ability to mount a FUSE filesystem.

Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 4 as they did not provide support for FUSE. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 5 as they did not backport the upstream commit 3b463ae0c6264f that introduced this issue. This has been addressed in Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1465.html and https://rhn.redhat.com/errata/RHSA-2012-0010.html.

Affected upstream versions: n/a
Fixed upstream versions: v3.1
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: c2183d1e9b3f313dd8ba2b1b0197c8d9fb86a7ae
CVE-2011-3359: kernel: b43: allocate receive buffers big enough for max frame len + offset
Component: kernel
Severity: Moderate
Public date: 2011-03-27T00:00:00+00:00

The dma_rx function in drivers/net/wireless/b43/dma.c in the Linux kernel before 2.6.39 does not properly allocate receive buffers, which allows remote attackers to cause a denial of service (system crash) via a crafted frame.

Statement: This issue did not affect the versions of the Linux kernel as shipped with Red
Hat Enterprise Linux 4 and 5 as they did not provide support for Broadcom 43xx wireless devices. This has been addressed in Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1465.html, and https://rhn.redhat.com/errata/RHSA-2012-0010.html.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.39
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: c85ce65ecac078ab1a1835c87c4a6319cf74660a
CVE-2011-3363: kernel: cifs: always do is_path_accessible check in cifs_mount
Component: kernel
Severity: Moderate
Public date: 2011-03-07T00:00:00+00:00

The setup_cifs_sb function in fs/cifs/connect.c in the Linux kernel before 2.6.39 does not properly handle DFS referrals, which allows remote CIFS servers to cause a denial of service (system crash) by placing a referral at the root of a share.

Statement: This issue affects the Linux kernel as shipped with Red Hat Enterprise Linux 4,
5, 6, and Red Hat Enterprise MRG. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates. This has been addressed in Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1479.html, https://rhn.redhat.com/errata/RHSA-2011-1465.html, and https://rhn.redhat.com/errata/RHSA-2012-0010.html.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.39
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 70945643722ffeac779d2529a348f99567fa5c33
CVE-2011-3372: cyrus-imapd: nntpd authentication bypass
Component: cyrus-imapd
Severity: Moderate
Public date: 2011-10-05T00:00:00+00:00

imap/nntpd.c in the NNTP server (nntpd) for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to bypass authentication by sending an AUTHINFO USER command without sending an additional AUTHINFO PASS command.


Affected upstream versions: n/a
Upstream repository: https://git.cyrusimap.org/cyrus-imapd
Upstream fix commit: 77903669e04c9788460561dd0560b9c916519594
CVE-2011-3378: rpm: crashes and overflows on malformed header
Component: rpm
Severity: Important
CWE: CWE-1285 (Improper Validation of Specified Index, Position, or Offset in Input)
Public date: 2011-09-27T00:00:00+00:00

RPM 4.4.x through 4.9.x, probably before 4.9.1.2, allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via an rpm package with crafted headers and offsets that are not properly handled when a package is queried or installed, related to (1) the regionSwab function, (2) the headerLoad function, and (3) multiple functions in rpmio/rpmpgp.c.


Affected upstream versions: n/a
Upstream repository: https://rpm.org/rpm.git
Upstream fix commit: 11a7e5d95a8ca8c7d4eaff179094afd8bb74fc3f
CVE-2011-3481: cyrus-imapd: NULL pointer dereference via crafted References header in email
Component: cyrus-imapd
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
Public date: 2005-12-17T00:00:00+00:00

The index_get_ids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side threading is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted References header in an e-mail message.


Affected upstream versions: n/a
Upstream repository: https://git.cyrusimap.org/cyrus-imapd
Upstream fix commit: 6e776956a1a9dfa58eacdd0ddd52644009eac9e5
CVE-2011-3585: Samba mtab lock file race condition
Component: Samba mtab lock file race condition
Severity: Low
Public date: 2010-02-25T00:00:00+00:00

Multiple race conditions in the (1) mount.cifs and (2) umount.cifs programs in Samba 3.6 allow local users to cause a denial of service (mounting outage) via a SIGKILL signal during a time window when the /etc/mtab~ file exists.


Affected upstream versions: 3.6
Upstream repository: https://git.samba.org/cifs-utils.git
Upstream fix commit: 810f7e4e0f2dbcbee0294d9b371071cb08268200
CVE-2011-3593: kernel: vlan: fix panic when handling priority tagged frames
Component: kernel
Severity: Moderate
Public date: 2011-11-15T00:00:00+00:00

A certain Red Hat patch to the vlan_hwaccel_do_receive function in net/8021q/vlan_core.c in the Linux kernel 2.6.32 on Red Hat Enterprise Linux (RHEL) 6 allows remote attackers to cause a denial of service (system crash) via priority-tagged VLAN frames.

Statement: This issue did not affect the Linux kernels as shipped with Red Hat Enterprise Linux 4, 5, and Red Hat Enterprise MRG. It affects the Linux kernel as shipped with Red Hat Enterprise Linux 6 due to incorrect backporting of upstream patches. A future kernel update in Red Hat Enterprise Linux 6 may address this issue.

Affected upstream versions: n/a
Upstream repository: https://oss.oracle.com/git/redpatch.git
Upstream fix commit: fadca7bdc43b02f518585d9547019966415cadfd
CVE-2011-3637: kernel: proc: fix oops on invalid /proc/<pid>/maps access
Component: kernel
Severity: Moderate
Public date: 2011-03-28T00:00:00+00:00

The m_stop function in fs/proc/task_mmu.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service (OOPS) via vectors that trigger an m_start error.

Statement: This issue did not affect the version of the Linux kernel as shipped with Red Hat Enterprise Linux 4, and 6 as it did not backport the upstream commit ec6fd8a4 that introduced this issue. This has been addressed in Red Hat Enterprise Linux 5 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2012-0007.html and https://rhn.redhat.com/errata/RHSA-2012-0010.html.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.39
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 76597cd31470fa130784c78fadb4dab2e624a723
CVE-2011-3638: kernel: ext4: ext4_ext_insert_extent() kernel oops
Component: kernel
Severity: Moderate
Public date: 2011-09-28T00:00:00+00:00

fs/ext4/extents.c in the Linux kernel before 3.0 does not mark a modified extent as dirty in certain cases of extent splitting, which allows local users to cause a denial of service (system crash) via vectors involving ext4 umount and mount operations.

Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 4 as it did not include support for EXT4 filesystem. It did not affect the Linux kernel as shipped with Red Hat Enterprise MRG as it has backported the upstream commit 667eff35 that addressed this issue. This has been addressed in Red Hat Enterprise Linux 5 and 6 via https://rhn.redhat.com/errata/RHSA-2012-0107.html and https://rhn.redhat.com/errata/RHSA-2011-1530.html.

Affected upstream versions: n/a
Fixed upstream versions: v3.0
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 667eff35a1f56fa74ce98a0c7c29a40adc1ba4e3
CVE-2011-4028: xorg-x11-server: File existence disclosure vulnerability
Component: xorg-x11-server
Severity: Low
Public date: 2011-10-18T00:00:00+00:00

The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to determine the existence of arbitrary files via a symlink attack on a temporary lock file, which is handled differently if the file exists.


Affected upstream versions: n/a
Fixed upstream versions: xorg-server-1.11.99.1
Upstream repository: https://cgit.freedesktop.org/xorg/xserver
Upstream fix commit: 6ba44b91e37622ef8c146d8f2ac92d708a18ed34
CVE-2011-4029: xorg-x11-server: lock file chmod change race condition
Component: xorg-x11-server
Severity: Low
Public date: 2011-10-18T00:00:00+00:00

The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to change the permissions of arbitrary files to 444, read those files, and possibly cause a denial of service (removed execution permission) via a symlink attack on a temporary lock file.


Affected upstream versions: n/a
Fixed upstream versions: xorg-server-1.11.99.1
Upstream repository: https://cgit.freedesktop.org/xorg/xserver
Upstream fix commit: b67581cf825940fdf52bf2e0af4330e695d724a4
CVE-2011-4080: kernel: sysctl: restrict write access to dmesg_restrict
Component: kernel
Severity: Low
Public date: 2011-03-23T00:00:00+00:00

The sysrq_sysctl_handler function in kernel/sysctl.c in the Linux kernel before 2.6.39 does not require the CAP_SYS_ADMIN capability to modify the dmesg_restrict value, which allows local users to bypass intended access restrictions and read the kernel ring buffer by leveraging root privileges, as demonstrated by a root user in a Linux Containers (aka LXC) environment.

Statement: Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance
life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore
the fix for this issue is not currently planned to be included in the future
updates. Future kernel updates in Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG may address this flaw.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.39
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: bfdc0b497faa82a0ba2f9dddcf109231dd519fcc
CVE-2011-4081: kernel: crypto: ghash: null pointer deref if no key is set
Component: kernel
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
Public date: 2011-10-20T00:00:00+00:00

crypto/ghash-generic.c in the Linux kernel before 3.1 allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact by triggering a failed or missing ghash_setkey function call, followed by a (1) ghash_update function call or (2) ghash_final function call, as demonstrated by a write operation on an AF_ALG socket.

Statement: This issue did not affect the Linux kernels as shipped with Red Hat Enterprise Linux 4, and 5 as they did not include support for the GHASH message digest algorithm. This has been addressed in Red Hat Enterprise Linux 6, and MRG via https://rhn.redhat.com/errata/RHSA-2012-0350.html, and https://rhn.redhat.com/errata/RHSA-2012-0010.html.

Affected upstream versions: n/a
Fixed upstream versions: v3.1
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 7ed47b7d142ec99ad6880bbbec51e9f12b3af74c
CVE-2011-4086: kernel: jbd2: unmapped buffer with _Unwritten or _Delay flags set can lead to DoS
Component: kernel
Severity: Moderate
Public date: 2012-01-25T00:00:00+00:00

The journal_unmap_buffer function in fs/jbd2/transaction.c in the Linux kernel before 3.3.1 does not properly handle the _Delay and _Unwritten buffer head states, which allows local users to cause a denial of service (system crash) by leveraging the presence of an ext4 filesystem that was mounted with a journal.

Statement: This has been addressed in Red Hat Enterprise Linux 5, 6, and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2012-0107.html, https://rhn.redhat.com/errata/RHSA-2012-0571.html, and https://rhn.redhat.com/errata/RHSA-2012-0670.html. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates.

Affected upstream versions: n/a
Fixed upstream versions: v3.4
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 15291164b22a357cb211b618adfef4fa82fc0de3
CVE-2011-4097: kernel: oom_badness() integer overflow
Component: kernel
Severity: Moderate
CWE: CWE-190 (Integer Overflow or Wraparound)
Public date: 2011-10-31T00:00:00+00:00

Integer overflow in the oom_badness function in mm/oom_kill.c in the Linux kernel before 3.1.8 on 64-bit platforms allows local users to cause a denial of service (memory consumption or process termination) by using a certain large amount of memory.

Statement: This issue did not affect the Linux kernel as shipped with Red Hat Enterprise Linux 4, 5, and 6 as they did not backport the upstream commit f755a04 that introduced this. This has been addressed in Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2012-0333.html.

Affected upstream versions: n/a
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 56c6a8a4aadca809e04276eabe5552935c51387f
CVE-2011-4127: kernel: possible privilege escalation via SG_IO ioctl
Component: kernel
Severity: Important
CWE: CWE-284 (Improper Access Control)
Public date: 2011-12-22T00:00:00+00:00

The Linux kernel before 3.2.2 does not properly restrict SG_IO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to (1) a partition block device or (2) an LVM volume.

Statement: This issue affects the Linux kernel as shipped with Red Hat Enterprise Linux 4,
5, 6, and Red Hat Enterprise MRG. This has been addressed in Red Hat Enterprise Linux 5, 6, and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2012-0107.html, https://rhn.redhat.com/errata/RHSA-2011-1849.html, and https://rhn.redhat.com/errata/RHSA-2012-0333.html. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates.

Affected upstream versions: n/a
Fixed upstream versions: v3.3
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: ec8013beddd717d1740cfefb1a9b900deef85462
CVE-2011-4128: gnutls: buffer overflow in gnutls_session_get_data() (GNUTLS-SA-2011-2)
Component: gnutls
Severity: Low
Public date: 2011-11-07T00:00:00+00:00

Buffer overflow in the gnutls_session_get_data function in lib/gnutls_session.c in GnuTLS 2.12.x before 2.12.14 and 3.x before 3.0.7, when used on a client that performs nonstandard session resumption, allows remote TLS servers to cause a denial of service (application crash) via a large SessionTicket.

Statement: This issue does not affect the version of gnutls as shipped with Red Hat Enterprise Linux 4.

Affected upstream versions: n/a
Upstream repository: https://git.savannah.gnu.org/gitweb/gnutls.git
Upstream fix commit: e82ef4545e9e98cbcb032f55d7c750b81e3a0450
CVE-2011-4131: kernel: nfs4_getfacl decoding kernel oops
Component: kernel
Severity: Moderate
Public date: 2011-11-05T00:00:00+00:00

The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.

Statement: This issue does not affect the Linux kernel as shipped with Red Hat Enterprise Linux 4 as it does not provide support for NFS ACLs. This issue does not affect the Linux kernel as shipped with Red Hat Enterprise Linux 5. This has been addressed in Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2012-0333.html. Future kernel updates in Red Hat Enterprise Linux 6 may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.3
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: bf118a342f10dafe44b14451a1392c3254629a1f