ACK: [SRU][Trusty][PATCH 0/1] Fix for CVE-2017-16649

Khaled Elmously khalid.elmously at canonical.com
Fri Oct 12 12:08:03 UTC 2018


On 2018-10-12 13:47:34 , Kleber Souza wrote:
> https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-16649.html
> 
>   Andrey Konovalov discovered that the CDC USB Ethernet driver did not
>   properly validate device descriptors. A physically proximate attacker could
>   use this to cause a denial of service (system crash).
> 
> Backport needed given that the parsion function was organises
> differently. Checked against the backport done for 3.16-stable. Compile
> tested.
> 
> Already fixed for Xenial and later series.
> 
> Bjørn Mork (1):
>   net: cdc_ether: fix divide by 0 on bad descriptors
> 
>  drivers/net/usb/cdc_ether.c | 5 +++--
>  1 file changed, 3 insertions(+), 2 deletions(-)
>

Acked-by: Khalid Elmously <khalid.elmously at canonical.com>

The backport makes sense to me 




More information about the kernel-team mailing list