[SRU][Trusty][PATCH 0/1] Fix for CVE-2017-16649

Kleber Sacilotto de Souza kleber.souza at canonical.com
Fri Oct 12 11:47:34 UTC 2018


  Andrey Konovalov discovered that the CDC USB Ethernet driver did not
  properly validate device descriptors. A physically proximate attacker could
  use this to cause a denial of service (system crash).

Backport needed given that the parsion function was organises
differently. Checked against the backport done for 3.16-stable. Compile

Already fixed for Xenial and later series.

Bjørn Mork (1):
  net: cdc_ether: fix divide by 0 on bad descriptors

 drivers/net/usb/cdc_ether.c | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)


More information about the kernel-team mailing list