[CVE-2016-7425][PATCH 0/2] heap-based buffer overflow in arcmsr

Luis Henriques luis.henriques at canonical.com
Mon Oct 24 15:09:52 UTC 2016


Following this email I'm sending the fix for CVE-2016-7425.  Precise and Trusty
needed some backporting; a clean cherry-pick for all the others.

Dan Carpenter (1):
  scsi: arcmsr: Buffer overflow in arcmsr_iop_message_xfer()

 drivers/scsi/arcmsr/arcmsr_hba.c | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)





More information about the kernel-team mailing list