oss-sec mailing list archives
some unstracked linux kernel security fixes
From: Nico Golde <oss-security+ml () ngolde de>
Date: Sun, 3 Nov 2013 17:32:52 +0100
Hi, Fabian Yamaguchi and myself stumbled upon a few kernel issues. Can someone assign CVE ids for these? drivers/uio/uio.c: mapping of physical memory to user space without proper size check drivers/video/au1100fb.c: integer overflow in checking of range when mapping physical memory to user space drivers/video/au1200fb.c: integer overflow in checking of range when mapping physical memory to user space https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7314e613d5ff arch/um/kernel/exitcode.c: buffer overflow in write syscall handler https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=201f99f170df14ba52ea4c52847779042b7a623b drivers/staging/ozwpan/ozcdev.c: buffer overflow in write syscall handler https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c2c65cd2e14ada6de44cb527e7f1990bede24e15 drivers/staging/wlags49_h2/wl_priv.c: buffer overflow when setting station name https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b5e2f339865fb443107e5b10603e53bbc92dc054 drivers/staging/bcm/Bcmchar.c: kernel memory disclosure via uninitialized structure members https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8d1e72250c847fa96498ec029891de4dc638a5ba drivers/staging/sb105x/sb_pci_mp.c: kernel memory disclosure via uninitialized structure members https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a8b33654b1e3b0c74d4a1fed041c9aae50b3c427 Thanks Nico
Current thread:
- some unstracked linux kernel security fixes Nico Golde (Nov 03)
- Re: some unstracked linux kernel security fixes Kurt Seifried (Nov 04)
- Re: some unstracked linux kernel security fixes Petr Matousek (Nov 12)
- Re: some unstracked linux kernel security fixes Petr Matousek (Nov 14)
- Re: some unstracked linux kernel security fixes Dan Carpenter (Nov 14)
- Re: some unstracked linux kernel security fixes Petr Matousek (Nov 14)
- kernel: uio: CVE-2013-6763 [was: Re: [oss-security] some unstracked linux kernel security fixes] Petr Matousek (Nov 26)
- Re: kernel: uio: CVE-2013-6763 [was: Re: [oss-security] some unstracked linux kernel security fixes] Greg Kroah-Hartman (Dec 02)
- Re: kernel: uio: CVE-2013-6763 [was: Re: [oss-security] some unstracked linux kernel security fixes] Linus Torvalds (Dec 02)
- Re: kernel: uio: CVE-2013-6763 [was: Re: [oss-security] some unstracked linux kernel security fixes] Petr Matousek (Dec 04)
- Re: some unstracked linux kernel security fixes Petr Matousek (Nov 14)