[kernel-sec-discuss] r3542 - active

[Moritz Muehlenhoff]

Author: jmm
Date: 2014-11-10 13:17:09 +0000 (Mon, 10 Nov 2014)
New Revision: 3542

Added:
   active/CVE-2014-7825
   active/CVE-2014-7826
Log:
two new issues added by carnil (who currently doesn't have the privs to commit himself)


Added: active/CVE-2014-7825
===================================================================
--- active/CVE-2014-7825	                        (rev 0)
+++ active/CVE-2014-7825	2014-11-10 13:17:09 UTC (rev 3542)
@@ -0,0 +1,12 @@
+Description: Perf subsystem oob read in supervisor mode (local DoS)
+References:
+ Fixed by https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=086ba77a6db00ed858ff07451bedee197df868c9 (v3.18-rc3)
+Notes:
+Bugs:
+upstream: [086ba77a6db00ed858ff07451bedee197df868c9] (v3.18-rc3)
+2.6.32-upstream-stable:
+sid:
+3.2-wheezy-security:
+2.6.32-squeeze-security:
+3.16-upstream-stable:
+3.2-upstream-stable:

Added: active/CVE-2014-7826
===================================================================
--- active/CVE-2014-7826	                        (rev 0)
+++ active/CVE-2014-7826	2014-11-10 13:17:09 UTC (rev 3542)
@@ -0,0 +1,13 @@
+Description: Ftrace subsystem supervisor mode code execution
+References:
+ Fixed by https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=086ba77a6db00ed858ff07451bedee197df868c9 (v3.18-rc3)
+ Support for SOFT_DISABLE to syscall events was added in https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d562aff93bfb530b0992141500a402d17081189d (v3.13-rc1)
+Notes:
+Bugs:
+upstream: [086ba77a6db00ed858ff07451bedee197df868c9] (v3.18-rc3)
+2.6.32-upstream-stable:
+sid:
+3.2-wheezy-security:
+2.6.32-squeeze-security:
+3.16-upstream-stable:
+3.2-upstream-stable: