huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2011-1776: kernel: validate size of EFI GUID partition entries
Component: kernel
Severity: Low
Public date: 2011-05-06T00:00:00+00:00

The is_gpt_valid function in fs/partitions/efi.c in the Linux kernel before 2.6.39 does not check the size of an Extensible Firmware Interface (EFI) GUID Partition Table (GPT) entry, which allows physically proximate attackers to cause a denial of service (heap-based buffer overflow and OOPS) or obtain sensitive information from kernel heap memory by connecting a crafted GPT storage device, a different vulnerability than CVE-2011-1577.

Statement: This issue affects the versions of Linux kernel as shipped with Red Hat
Enterprise 4, 5, 6, and Red Hat Enterprise MRG. This has been addressed in Red Hat Enterprise Linux 5, 6, and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-0927.html and https://rhn.redhat.com/errata/RHSA-2011-1189.html, and https://rhn.redhat.com/errata/RHSA-2011-1253.html. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.39
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: fa039d5f6b126fbd65eefa05db2f67e44df8f121
CVE-2011-1781: systemtap: divide by zero stack unwinding flaw
Component: systemtap
Severity: Moderate
Public date: 2011-05-11T00:00:00+00:00

SystemTap 1.4, when unprivileged (aka stapusr) mode is enabled, allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted ELF program with DWARF expressions that are not properly handled by a stap script that performs stack unwinding (aka backtracing).


Affected upstream versions: n/a
Fixed upstream versions: release-1.5
Upstream repository: https://sourceware.org/git/systemtap.git
Upstream fix commit: fa2e3415185a28542d419a641ecd6cddd52e3cd9
CVE-2011-1833: kernel: ecryptfs: mount source TOCTOU race
Component: kernel
Severity: Moderate
CWE: CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition)
Public date: 2011-08-09T00:00:00+00:00

Race condition in the ecryptfs_mount function in fs/ecryptfs/main.c in the eCryptfs subsystem in the Linux kernel before 3.1 allows local users to bypass intended file permissions via a mount.ecryptfs_private mount with a mismatched uid.


Affected upstream versions: n/a
Fixed upstream versions: v3.1
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 764355487ea220fdc2faf128d577d7f679b91f97
CVE-2011-1926: cyrus-imapd: STARTTLS plaintext command injection
Component: cyrus-imapd
Severity: Moderate
Public date: 2011-03-25T00:00:00+00:00

The STARTTLS implementation in Cyrus IMAP Server before 2.4.7 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.


Affected upstream versions: n/a
Upstream repository: https://git.cyrusimap.org/cyrus-imapd
Upstream fix commit: 523a91a5e86c8b9a27a138f04a3e3f2d8786f162
CVE-2011-1929: dovecot: potential crash when parsing header names that contain NUL characters
Component: dovecot
Severity: Moderate
Public date: 2011-05-11T00:00:00+00:00

lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle '\0' characters in header names, which allows remote attackers to cause a denial of service (daemon crash or mailbox corruption) via a crafted e-mail message.


Affected upstream versions: n/a
Upstream repository: https://hg.dovecot.org/dovecot-1.1
Upstream fix commit: 3698dfe0f21c
CVE-2011-1944: libxml2: Heap-based buffer overflow by adding new namespace node to an existing nodeset or merging nodesets
Component: libxml2
Severity: Low
CWE: CWE-122 (Heap-based Buffer Overflow)
Public date: 2011-05-27T00:00:00+00:00

Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XML file that triggers a heap-based buffer overflow when adding a new namespace node, related to handling of XPath expressions.


Affected upstream versions: n/a
Fixed upstream versions: v2.8.0
Upstream repository: https://git.gnome.org/browse/libxml2
Upstream fix commit: d7958b21e7f8c447a26bb2436f08402b2c308be4
CVE-2011-2022: kernel: agp: insufficient pg_start parameter checking in AGPIOC_BIND and AGPIOC_UNBIND ioctls
Component: kernel
Severity: Important
Public date: 2011-04-14T00:00:00+00:00

The agp_generic_remove_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 does not validate a certain start parameter, which allows local users to gain privileges or cause a denial of service (system crash) via a crafted AGPIOC_UNBIND agp_ioctl ioctl call, a different vulnerability than CVE-2011-1745.

Statement: This issue affects the versions of Linux kernel as shipped with Red Hat
Enterprise 4, 5, 6, and Red Hat Enterprise MRG. This has been addressed in Red Hat Enterprise Linux 5, 6, and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-0927.html, https://rhn.redhat.com/errata/RHSA-2011-1350.html, and https://rhn.redhat.com/errata/RHSA-2011-1253.html. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.39
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 194b3da873fd334ef183806db751473512af29ce
CVE-2011-2183: kernel: ksm: race between ksmd and exiting task
Component: kernel
Severity: Moderate
Public date: 2011-06-02T00:00:00+00:00

Race condition in the scan_get_next_rmap_item function in mm/ksm.c in the Linux kernel before 2.6.39.3, when Kernel SamePage Merging (KSM) is enabled, allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted application.

Statement: This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 4, 5, and Red Hat Enterprise MRG do not provide support for KSM (Kernel Samepage Merging). This has been addressed in Red Hat Enterprise Linux 6 via https://rhn.redhat.com/errata/RHSA-2011-1189.html.

Affected upstream versions: n/a
Fixed upstream versions: v3.0
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 2b472611a32a72f4a118c069c2d62a1a3f087afd
CVE-2011-2200: dbus: Local DoS via messages with non-native byte order
Component: dbus
Severity: Moderate
Public date: 2011-06-09T00:00:00+00:00

The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain potentially sensitive information, or conduct unspecified state-modification attacks via crafted messages.


Affected upstream versions: n/a
Fixed upstream versions: dbus-1.2.28
Upstream repository: https://cgit.freedesktop.org/dbus/dbus
Upstream fix commit: 6519a1f77c61d753d4c97efd6e15630eb275336e
CVE-2011-2213: kernel: inet_diag: insufficient validation
Component: kernel
Severity: Moderate
Public date: 2011-06-01T00:00:00+00:00

The inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel before 2.6.39.3 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink message, as demonstrated by an INET_DIAG_BC_JMP instruction with a zero yes value, a different vulnerability than CVE-2010-3880.

Statement: This issue affects the Linux kernel as shipped with Red Hat Enterprise Linux 4,
5, 6, and Red Hat Enterprise MRG. Red Hat Enterprise Linux 4 is now in
Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates. This has been addressed in Red Hat Enterprise Linux 5, 6, and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-0927.html, https://rhn.redhat.com/errata/RHSA-2011-1189.html and https://rhn.redhat.com/errata/RHSA-2011-1253.html.

Affected upstream versions: n/a
Fixed upstream versions: v3.0
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: eeb1497277d6b1a0a34ed36b97e18f2bd7d6de0d
CVE-2011-2479: kernel: thp: madvise on top of /dev/zero private mapping can lead to panic
Component: kernel
Severity: Moderate
Public date: 2011-03-24T00:00:00+00:00

The Linux kernel before 2.6.39 does not properly create transparent huge pages in response to a MAP_PRIVATE mmap system call on /dev/zero, which allows local users to cause a denial of service (system crash) via a crafted application.

Statement: The versions of the Linux kernel as shipped with Red Hat Enterprise Linux 4, 5, and Red Hat Enterprise MRG are not affected because they do not provide support for THP (Transparent Huge Pages). This has been addressed in Red Hat Enterprise Linux 6 via https://rhn.redhat.com/errata/RHSA-2011-0928.html.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.39
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 78f11a255749d09025f54d4e2df4fbcb031530e2
CVE-2011-2482: kernel: sctp dos
Component: kernel
Severity: Important
CWE: CWE-476 (NULL Pointer Dereference)
Public date: 2011-08-30T00:00:00+00:00

A certain Red Hat patch to the sctp_sock_migrate function in net/sctp/socket.c in the Linux kernel before 2.6.21, as used in Red Hat Enterprise Linux (RHEL) 5, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) via a crafted SCTP packet.

Statement: This issue did not affect the Linux kernel as shipped with Red Hat Enterprise Linux 4 as it did not backport the upstream commit 3ab224be6d6. It did not affect the Linux kernels as shipped with Red Hat Enterprise Linux 6, and Red Hat Enterprise MRG as they have backported the upstream commit ea2bc483ff5 that Red Hat Enterprise Linux 5 did not. This has been addressed in Red Hat Enterprise Linux 5 via https://rhn.redhat.com/errata/RHSA-2011-1212.html.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.21
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: ea2bc483ff5caada7c4aa0d5fbf87d3a6590273d
CVE-2011-2486: nspluginwrapper: NPNVprivateModeBool variable not forwarded
Component: nspluginwrapper
Severity: Low
Public date: 2011-03-25T00:00:00+00:00

nspluginwrapper before 1.4.4 does not properly provide access to NPNVprivateModeBool variable settings, which could prevent Firefox plugins from determining if they should run in Private Browsing mode and allow remote attackers to bypass intended access restrictions, as demonstrated using Flash.

Statement: Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Fixed upstream versions: nspluginwrapper-1.3.2
Upstream repository: https://github.com/davidben/nspluginwrapper
Upstream fix commit: 7e4ab8e1189846041f955e6c83f72bc1624e7a98
CVE-2011-2491: kernel: rpc task leak after flock()ing  NFS share
Component: kernel
Severity: Important
Public date: 2011-05-31T00:00:00+00:00

The Network Lock Manager (NLM) protocol implementation in the NFS client functionality in the Linux kernel before 3.0 allows local users to cause a denial of service (system hang) via a LOCK_UN flock system call.


Affected upstream versions: n/a
Fixed upstream versions: v3.0
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 0b760113a3a155269a3fba93a409c640031dd68f
CVE-2011-2492: kernel: bluetooth: l2cap and rfcomm: fix 1 byte infoleak to userspace
Component: kernel
Severity: Low
Public date: 2011-05-09T00:00:00+00:00

The bluetooth subsystem in the Linux kernel before 3.0-rc4 does not properly initialize certain data structures, which allows local users to obtain potentially sensitive information from kernel memory via a crafted getsockopt system call, related to (1) the l2cap_sock_getsockopt_old function in net/bluetooth/l2cap_sock.c and (2) the rfcomm_sock_getsockopt_old function in net/bluetooth/rfcomm/sock.c.

Statement: This issue affects the versions of Linux kernel as shipped with Red Hat Enterprise Linux 4, 5, 6, and Red Hat Enterprise MRG. It has been addressed in Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-0927.html, https://rhn.redhat.com/errata/RHSA-2011-1189.html, and https://rhn.redhat.com/errata/RHSA-2011-1253.html. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates.

Affected upstream versions: n/a
Fixed upstream versions: v3.0
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 8d03e971cf403305217b8e62db3a2e5ad2d6263f
CVE-2011-2494: kernel: taskstats io infoleak
Component: kernel
Severity: Low
Public date: 2011-06-21T00:00:00+00:00

kernel/taskstats.c in the Linux kernel before 3.1 allows local users to obtain sensitive I/O statistics by sending taskstats commands to a netlink socket, as demonstrated by discovering the length of another user's password.

Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 4 as it did not provide support for the Taskstats interface. This has been addressed in Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1479.html, https://rhn.redhat.com/errata/RHSA-2011-1465.html, and https://rhn.redhat.com/errata/RHSA-2012-0010.html.

Affected upstream versions: n/a
Fixed upstream versions: v3.1
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 1a51410abe7d0ee4b1d112780f46df87d3621043
CVE-2011-2495: kernel: /proc/PID/io infoleak
Component: kernel
Severity: Low
Public date: 2011-06-21T00:00:00+00:00

fs/proc/base.c in the Linux kernel before 2.6.39.4 does not properly restrict access to /proc/#####/io files, which allows local users to obtain sensitive I/O statistics by polling a file, as demonstrated by discovering the length of another user's password.

Statement: This has been addressed in Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1212.html, https://rhn.redhat.com/errata/RHSA-2011-1189.html, and https://rhn.redhat.com/errata/RHSA-2011-1253.html. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates.

Affected upstream versions: n/a
Fixed upstream versions: v3.0
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 1d1221f375c94ef961ba8574ac4f85c8870ddd51
CVE-2011-2496: kernel: mm: avoid wrapping vm_pgoff in mremap() and stack expansions
Component: kernel
Severity: Moderate
Public date: 2011-04-07T00:00:00+00:00

Integer overflow in the vma_to_resize function in mm/mremap.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service (BUG_ON and system crash) via a crafted mremap system call that expands a memory mapping.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.39
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 982134ba62618c2d69fbbbd166d0a11ee3b7e3d8
CVE-2011-2497: kernel: bluetooth: buffer overflow in l2cap config request
Component: kernel
Severity: Important
CWE: CWE-191 (Integer Underflow (Wrap or Wraparound))
Public date: 2011-06-24T00:00:00+00:00

Integer underflow in the l2cap_config_req function in net/bluetooth/l2cap_core.c in the Linux kernel before 3.0 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a small command-size value within the command header of a Logical Link Control and Adaptation Protocol (L2CAP) configuration request, leading to a buffer overflow.

Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 4 and 5 as they did not backport the upstream commit 5dee9e7c that introduced this issue. This has been addressed in Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1189.html, and https://rhn.redhat.com/errata/RHSA-2011-1253.html.

Affected upstream versions: n/a
Fixed upstream versions: v3.0
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 7ac28817536797fd40e9646452183606f9e17f71
CVE-2011-2501: libpng: regression of CVE-2004-0421 in 1.2.23+
Component: libpng
Severity: Moderate
Public date: 2011-06-07T00:00:00+00:00

The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service (application crash) via a crafted PNG image that triggers an out-of-bounds read during the copying of error-message data.  NOTE: this vulnerability exists because of a CVE-2004-0421 regression. NOTE: this is called an off-by-one error by some sources.


Affected upstream versions: n/a
Upstream repository: https://libpng.git.sourceforge.net/git/libpng/libpng
Upstream fix commit: 65e6d5a34f49acdb362a0625a706c6b914e670af
CVE-2011-2502: systemtap: insufficient security check when loading uprobes kernel module
Component: systemtap
Severity: Moderate
Public date: 2011-07-25T00:00:00+00:00

runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate modules when a module path is specified by a user for user-space probing, which allows local users in the stapusr group to gain privileges via a crafted module in the search path in the -u argument.


Affected upstream versions: n/a
Upstream repository: https://sources.redhat.com/git/systemtap.git
Upstream fix commit: 4ecaadf545a729bb3e5f01f6f019716d49815d9a
CVE-2011-2503: systemtap: signed module loading race condition
Component: systemtap
Severity: Moderate
Public date: 2011-07-25T00:00:00+00:00

The insert_module function in runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate a module when loading it, which allows local users to gain privileges via a race condition between the signature validation and the module initialization.


Affected upstream versions: n/a
Upstream repository: https://sources.redhat.com/git/systemtap.git
Upstream fix commit: ed51cfa24ca27746ab09b59280b94117dd58cba3
CVE-2011-2512: qemu-kvm: OOB memory access caused by negative vq notifies
Component: qemu-kvm
Severity: Important
Public date: 2011-05-08T00:00:00+00:00

The virtio_queue_notify in qemu-kvm 0.14.0 and earlier does not properly validate the virtqueue number, which allows guest users to cause a denial of service (guest crash) and possibly execute arbitrary code via a negative number in the Queue Notify field of the Virtio Header, which bypasses a signed comparison.

Statement: This issue only affects Red Hat Enterprise Linux 6. The version of the qemu/kvm
as shipped with Red Hat Enterprise Linux 5 is not affected.

Affected upstream versions: n/a
Upstream repository: https://git.kernel.org/virt/kvm/qemu-kvm.git
Upstream fix commit: 7157e2e23e89adcd436caeab31fdd6b47eded377
CVE-2011-2513: icedtea-web: home directory path disclosure to untrusted applications
Component: icedtea-web
Severity: Low
Public date: 2011-07-20T00:00:00+00:00

The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote attackers to obtain the username and full path of the home and cache directories by accessing properties of the ClassLoader.


Affected upstream versions: n/a
Upstream repository: https://icedtea.classpath.org/hg/release/icedtea-web-1.0
Upstream fix commit: b29fdd0f4d04
CVE-2011-2514: icedtea-web: Java Web Start security warning dialog manipulation
Component: icedtea-web
Severity: Moderate
Public date: 2011-07-20T00:00:00+00:00

The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote attackers to trick victims into granting access to local files by modifying the content of the Java Web Start Security Warning dialog box to represent a different filename than the file for which access will be granted.


Affected upstream versions: n/a
Upstream repository: https://icedtea.classpath.org/hg/release/icedtea-web-1.0
Upstream fix commit: b99f9a9769e0
CVE-2011-2517: kernel: nl80211: missing check for valid SSID size in scan operations
Component: kernel
Severity: Important
Public date: 2011-05-18T00:00:00+00:00

Multiple buffer overflows in net/wireless/nl80211.c in the Linux kernel before 2.6.39.2 allow local users to gain privileges by leveraging the CAP_NET_ADMIN capability during scan operations with a long SSID value.

Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat
Enterprise Linux 4 as it did not provide support for the Linux wireless LAN (802.11) configuration API. This has been addressed in Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1212.html, https://rhn.redhat.com/errata/RHSA-2011-1189.html, and https://rhn.redhat.com/errata/RHSA-2011-1253.html.

Affected upstream versions: n/a
Fixed upstream versions: v3.0
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 208c72f4fe44fe09577e7975ba0e7fa0278f3d03
CVE-2011-2521: kernel: perf, x86: fix Intel fixed counters base initialization
Component: kernel
Severity: Moderate
Public date: 2011-03-19T00:00:00+00:00

The x86_assign_hw_event function in arch/x86/kernel/cpu/perf_event.c in the Performance Events subsystem in the Linux kernel before 2.6.39 does not properly calculate counter values, which allows local users to cause a denial of service (panic) via the perf program.

Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 4, 5, and Red Hat Enterprise MRG as they did not backport the upstream commit 41bf498 that introduced the issue. This has been addressed in Red Hat Enterprise Linux 6 via https://rhn.redhat.com/errata/RHSA-2011-1350.html.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.39
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: fc66c5210ec2539e800e87d7b3a985323c7be96e