oss-sec mailing list archives

Re: CVE request: Linux kernel: chipidea: allow disabling streaming in host mode


From: Kurt Seifried <kseifried () redhat com>
Date: Sun, 05 May 2013 00:37:44 -0600

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 05/03/2013 05:22 AM, P J P wrote:
Hello,

Linux kernel built with the ChipIdia Highspeed Dual Role
Controller (CONFIG_USB_CHIPIDEA) along with the ChipIdea host
controller (CONFIG_USB_CHIPIDEA_HOST) modules, is vulnerable to a
kernel crash. It occurs while streaming content over network via
USB/Ethernet adapter

A user/program could use this flaw to crash the kernel resulting in
DoS.

Upstream fix: ------------- ->
https://git.kernel.org/linus/929473ea05db455ad88cdc081f2adc556b8dc48f

 Reference: ---------- ->
https://bugzilla.redhat.com/show_bug.cgi?id=959210

Thank you. -- Prasad J Pandit / Red Hat Security Response Team DB7A
84C5 D3F9 7CD1 B5EB  C939 D048 7860 3655 602B

Please use CVE-2013-2058 for this issue.

- -- 
Kurt Seifried Red Hat Security Response Team (SRT)
PGP: 0x5E267993 A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
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=8d7C
-----END PGP SIGNATURE-----


Current thread: