[ACK] [CVE-2011-1160] char/tpm: Fix unitialized usage of data buffer
stefan.bader at canonical.com
Wed Jul 27 15:36:30 UTC 2011
On 27.07.2011 17:20, Andy Whitcroft wrote:
> This patch fixes information leakage to the userspace by
> initializing the data buffer to zero.
> The fix for this CVE has lucid and later via mainline and stable
> updates. Following this email are two patches, one for hardy, and one
> for lucid/fsl-imx51 and maverick/ti-omap4. The first is a simple
> backport of the mainline fix, the second a cherry-pick.
> Proposing for hardy, lucid/fsl-imx51, and maverick/ti-omap4.
Acked-by: Stefan Bader <stefan.bader at canonical.com>
More information about the kernel-team