CVE request - kernel: char: Int overflow in lp_do_ioctl()

[Yongjian Xu <xuyongjiande () gmail com>]

Hi,

https://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git/commit/?id=1c2de820d66d704c7d6fffdd872b7670eb4e29bb

This is an integer overflow, and can be controlled via ioctl.

arg comes from user-space, so int overflow may occur in this:
LP_TIME(minor) = arg * HZ/100;