[CVE-2016-3857] local privilege escalation under CONFIG_OABI_COMPAT
Luis Henriques
luis.henriques at canonical.com
Fri Aug 26 09:22:55 UTC 2016
Initially I believed this CVE was Android-specific, but it actually
affects kernels with CONFIG_OABI_COMPAT enabled. This means that Precise
kernels need this fix -- I've checked all other kernels and this config is
disabled (although this patch applies cleanly).
Dave Weinstein (1):
arm: oabi compat: add missing access checks
arch/arm/kernel/sys_oabi-compat.c | 8 +++++++-
1 file changed, 7 insertions(+), 1 deletion(-)
More information about the kernel-team
mailing list