[kernel-sec-discuss] r5659 - active

Salvatore Bonaccorso carnil at moszumanska.debian.org
Tue Oct 17 20:45:00 UTC 2017


Author: carnil
Date: 2017-10-17 20:45:00 +0000 (Tue, 17 Oct 2017)
New Revision: 5659

Added:
   active/CVE-2017-15537
Log:
Add CVE-2017-15537

Added: active/CVE-2017-15537
===================================================================
--- active/CVE-2017-15537	                        (rev 0)
+++ active/CVE-2017-15537	2017-10-17 20:45:00 UTC (rev 5659)
@@ -0,0 +1,13 @@
+Description: x86/fpu: Don't let userspace set bogus xcomp_bv
+References:
+Notes:
+ carnil> Introduced in 3.17-rc1 with 0b29643a58439dc9a8b0c0cacad0e7cb608c8199
+Bugs:
+upstream: released (4.14-rc3) [814fb7bb7db5433757d76f4c4502c96fc53b0b5e]
+4.9-upstream-stable: released (4.9.53) [5e9b07f30d21295b83f2024ffb5a349d3af6f749]
+3.16-upstream-stable: N/A "Vulnerable code introduced in 3.17-rc1"
+3.2-upstream-stable: N/A "Vulnerable code introduced in 3.17-rc1"
+sid: needed
+4.9-stretch-security: needed
+3.16-jessie-security: N/A "Vulnerable code introduced later"
+3.2-wheezy-security: N/A "Vulnerable code introduced later"




More information about the kernel-sec-discuss mailing list