Published: 18 June 2012
The rds_ib_xmit function in net/rds/ib_send.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel 3.7.4 and earlier allows local users to cause a denial of service (BUG_ON and kernel panic) by establishing an RDS connection with the source IP address equal to the IPoIB interface's own IP address, as demonstrated by rds-ping.
From the Ubuntu security team
A flaw was found in the Linux kernel's Reliable Datagram Sockets (RDS) protocol implementation. A local, unprivileged user could use this flaw to cause a denial of service.
linux-armadaxp is maintained by OEM
this is claimed fixed by RedHat but I cannot find the fix anywhere, the only reference I did find to the CVE in Fedora implies they have miss tagged the fix for CVE-2012-2373 as 2372: http://permalink.gmane.org/gmane.linux.redhat.fedora.extras.cvs/775892 note the patch is the x86 pmd patch. needs-triage back to -security for lack of a clear direction on a fix (per irc discussions) Looking at the RHEL kernels it appears that this is the fix, though it is not upstream as yet: http://people.canonical.com/~apw/misc/cves/CVE-2012-2372-1.diff
https://oss.oracle.com/git/?p=redpatch.git;a=commitdiff;h=c7b6a0a1d8d636852be130fa15fa8be10d4704e8 seems fixed upstream by 18fc25c94eadc52a42c025125af24657a93638c0