ACK: [CVE A/T v2] CVE-2018-1130 -- dccp oops

Khaled Elmously khalid.elmously at canonical.com
Thu Jun 7 18:10:52 UTC 2018


On 2018-06-07 09:34:33 , Andy Whitcroft wrote:
> CVE-2018-1130
>     It was discovered that a null pointer dereference vulnerability
>     existed in the DCCP protocol implementation in the Linux kernel. A
>     local attacker could use this to cause a denial of service (system
>     crash).
> 
> Following this email are patch sets for artful and trusty, all patches
> are clean cherry-picks.  For trusty there is a second fix also tickled
> by the reproducer, the fix for this is already applied in artful.
> 
> Proposing for SRU to artful/linux and trusty/linux.
> 
Acked-by: Khalid Elmously <khalid.elmously at canonical.com>





More information about the kernel-team mailing list