Linux Kernel Multiple Security fixes

2013-11-04 / 2013-11-05
Credit: Nico
Risk: High
Local: Yes
Remote: No
CWE: CWE-119

Fabian Yamaguchi and myself stumbled upon a few kernel issues. Can someone assign CVE ids for these? drivers/uio/uio.c: mapping of physical memory to user space without proper size check drivers/video/au1100fb.c: integer overflow in checking of range when mapping physical memory to user space drivers/video/au1200fb.c: integer overflow in checking of range when mapping physical memory to user space https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7314e613d5ff arch/um/kernel/exitcode.c: buffer overflow in write syscall handler https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=201f99f170df14ba52ea4c52847779042b7a623b drivers/staging/ozwpan/ozcdev.c: buffer overflow in write syscall handler https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c2c65cd2e14ada6de44cb527e7f1990bede24e15 drivers/staging/wlags49_h2/wl_priv.c: buffer overflow when setting station name https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b5e2f339865fb443107e5b10603e53bbc92dc054 drivers/staging/bcm/Bcmchar.c: kernel memory disclosure via uninitialized structure members https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8d1e72250c847fa96498ec029891de4dc638a5ba drivers/staging/sb105x/sb_pci_mp.c: kernel memory disclosure via uninitialized structure members https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a8b33654b1e3b0c74d4a1fed041c9aae50b3c427 Thanks Nico

References:

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7314e613d5ff
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c2c65cd2e14ada6de44cb527e7f1990bede24e15
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b5e2f339865fb443107e5b10603e53bbc92dc054
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8d1e72250c847fa96498ec029891de4dc638a5ba
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a8b33654b1e3b0c74d4a1fed041c9aae50b3c427
http://seclists.org/oss-sec/2013/q4/209


Vote for this issue:
50%
50%

Comment it here.

Copyright 2025, cxsecurity.com

 

Back to Top