[Trusty][SRU][PATCH 0/1] Fix for CVE-2017-0627

Po-Hsu Lin po-hsu.lin at canonical.com
Tue May 8 07:57:46 UTC 2018


According to our CVE matrix, only Trusty needs this patch.

An extra check to validate the user-provided bit-size and offset was added in
this patch to fix this CVE issue.

Guenter Roeck (1):
  media: uvcvideo: Prevent heap overflow when accessing mapped controls

 drivers/media/usb/uvc/uvc_ctrl.c | 7 +++++++
 1 file changed, 7 insertions(+)

-- 
2.7.4





More information about the kernel-team mailing list