APPLIED: [PATCH 0/3][T] CVE-2017-0794 - Privilege escalation in the SCSI driver

Stefan Bader stefan.bader at
Mon Oct 1 10:21:51 UTC 2018

On 28.09.2018 23:29, Tyler Hicks wrote:
>   A elevation of privilege vulnerability in the Upstream kernel scsi driver.
> I've manually tested these patches using the Android reproducer[1] and
> sg_dd from sg3-utils inside of a VM with a SCSI drive attached.
> Note, this is a corrected patch set from when I used the wrong CVE ID[2] when
> referring to this patch set. I've adjusted the CVE ID used in the commit
> messages and tested with the correct reproducer for CVE-2017-0794.
> [1]
> [2]
> Tyler
Applied to trusty/master-next. Thanks.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <>

More information about the kernel-team mailing list