CVE ID:	CVE-2008-4302
Description:	fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the add_to_page_cache_lru function, and subsequently attempts to unlock a page that was not locked, which allows local users to cause a denial of service (kernel BUG and system crash), as demonstrated by the fio I/O tool.
Test IDs:	1.3.6.1.4.1.25623.1.0.61775
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-4302 BugTraq ID: 31201 http://www.securityfocus.com/bid/31201 Debian Security Information: DSA-1653 (Google Search) http://www.debian.org/security/2008/dsa-1653 http://www.juniper.net/security/auto/vulnerabilities/vuln31201.html http://lkml.org/lkml/2007/7/20/168 http://www.openwall.com/lists/oss-security/2008/09/16/10 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10547 RedHat Security Advisories: RHSA-2008:0957 http://www.redhat.com/support/errata/RHSA-2008-0957.html http://secunia.com/advisories/32237 http://secunia.com/advisories/32485 http://secunia.com/advisories/32759 SuSE Security Announcement: SUSE-SR:2008:025 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html XForce ISS Database: linux-kernel-addtopagecachelru-dos(45191) https://exchange.xforce.ibmcloud.com/vulnerabilities/45191