]> git.proxmox.com Git - pve-kernel.git/commit
add CVE fixes
authorThomas Lamprecht <t.lamprecht@proxmox.com>
Tue, 18 Jul 2017 12:53:59 +0000 (14:53 +0200)
committerWolfgang Bumiller <w.bumiller@proxmox.com>
Wed, 19 Jul 2017 07:46:19 +0000 (09:46 +0200)
commit4c390211d88a2e586f9ea5946c66237284db698b
tree58ade3b2be789bb22a8c1d66f9102d92088ac88b
parenta7f181d4b020e042876b20a6011a95f13d3cc0e6
add CVE fixes

CVE-2017-1000364 (rather bugfix for the original CVE fix):
 * mm/mmap.c: expand_downwards: don't require the gap if !vm_prev
 * mm/mmap.c: do not blow on PROT_NONE MAP_FIXED holes in the stack

CVE-2017-1000365: fs/exec.c: account for argv/envp pointers

CVE-2017-10810: drm/virtio: don't leak bo on drm_gem_object_init
 failure

CVE-2017-7482: rxrpc: Fix several cases where a padded len isn't
 checked in ticket decode

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
CVE-2017-1000364-mm-mmap.c-do-not-blow-on-PROT_NONE-MAP_FIXED-holes-i.patch [new file with mode: 0644]
CVE-2017-1000364-mm-mmap.c-expand_downwards-don-t-require-the-gap-if-.patch [new file with mode: 0644]
CVE-2017-1000365-fs-exec.c-account-for-argv-envp-pointers.patch [new file with mode: 0644]
CVE-2017-10810-drm-virtio-don-t-leak-bo-on-drm_gem_object_init-fail.patch [new file with mode: 0644]
CVE-2017-7482-rxrpc-Fix-several-cases-where-a-padded-len-isn-t-che.patch [new file with mode: 0644]
Makefile