2011-05-23 18:50:20 |
Herton R. Krzesinski |
bug |
|
|
added bug |
2011-05-23 18:50:24 |
Herton R. Krzesinski |
tags |
|
kernel-cve-tracking-bug |
|
2011-05-23 18:50:25 |
Herton R. Krzesinski |
security vulnerability |
no |
yes |
|
2011-05-23 18:50:36 |
Herton R. Krzesinski |
cve linked |
|
2011-1494 |
|
2011-05-23 18:50:44 |
Herton R. Krzesinski |
nominated for series |
|
Ubuntu Oneiric |
|
2011-05-23 18:50:45 |
Herton R. Krzesinski |
nominated for series |
|
Ubuntu Natty |
|
2011-05-23 18:50:47 |
Herton R. Krzesinski |
nominated for series |
|
Ubuntu Maverick |
|
2011-05-23 18:50:49 |
Herton R. Krzesinski |
nominated for series |
|
Ubuntu Lucid |
|
2011-05-23 18:50:51 |
Herton R. Krzesinski |
nominated for series |
|
Ubuntu Hardy |
|
2011-05-23 18:50:52 |
Herton R. Krzesinski |
nominated for series |
|
Ubuntu Dapper |
|
2011-05-23 18:55:16 |
Brad Figg |
bug task added |
|
linux (Ubuntu Hardy) |
|
2011-05-23 18:55:16 |
Brad Figg |
bug task added |
|
linux-fsl-imx51 (Ubuntu Hardy) |
|
2011-05-23 18:55:16 |
Brad Figg |
bug task added |
|
linux-lts-backport-maverick (Ubuntu Hardy) |
|
2011-05-23 18:55:16 |
Brad Figg |
bug task added |
|
linux-mvl-dove (Ubuntu Hardy) |
|
2011-05-23 18:55:16 |
Brad Figg |
bug task added |
|
linux-ti-omap4 (Ubuntu Hardy) |
|
2011-05-23 18:55:33 |
Brad Figg |
bug task added |
|
linux (Ubuntu Lucid) |
|
2011-05-23 18:55:33 |
Brad Figg |
bug task added |
|
linux-fsl-imx51 (Ubuntu Lucid) |
|
2011-05-23 18:55:33 |
Brad Figg |
bug task added |
|
linux-lts-backport-maverick (Ubuntu Lucid) |
|
2011-05-23 18:55:33 |
Brad Figg |
bug task added |
|
linux-mvl-dove (Ubuntu Lucid) |
|
2011-05-23 18:55:33 |
Brad Figg |
bug task added |
|
linux-ti-omap4 (Ubuntu Lucid) |
|
2011-05-23 18:55:46 |
Brad Figg |
bug task added |
|
linux (Ubuntu Maverick) |
|
2011-05-23 18:55:46 |
Brad Figg |
bug task added |
|
linux-fsl-imx51 (Ubuntu Maverick) |
|
2011-05-23 18:55:46 |
Brad Figg |
bug task added |
|
linux-lts-backport-maverick (Ubuntu Maverick) |
|
2011-05-23 18:55:46 |
Brad Figg |
bug task added |
|
linux-mvl-dove (Ubuntu Maverick) |
|
2011-05-23 18:55:46 |
Brad Figg |
bug task added |
|
linux-ti-omap4 (Ubuntu Maverick) |
|
2011-05-23 18:55:58 |
Brad Figg |
bug task added |
|
linux (Ubuntu Natty) |
|
2011-05-23 18:55:58 |
Brad Figg |
bug task added |
|
linux-fsl-imx51 (Ubuntu Natty) |
|
2011-05-23 18:55:58 |
Brad Figg |
bug task added |
|
linux-lts-backport-maverick (Ubuntu Natty) |
|
2011-05-23 18:55:58 |
Brad Figg |
bug task added |
|
linux-mvl-dove (Ubuntu Natty) |
|
2011-05-23 18:55:58 |
Brad Figg |
bug task added |
|
linux-ti-omap4 (Ubuntu Natty) |
|
2011-05-23 18:56:09 |
Brad Figg |
bug task added |
|
linux (Ubuntu Oneiric) |
|
2011-05-23 18:56:09 |
Brad Figg |
bug task added |
|
linux-fsl-imx51 (Ubuntu Oneiric) |
|
2011-05-23 18:56:09 |
Brad Figg |
bug task added |
|
linux-lts-backport-maverick (Ubuntu Oneiric) |
|
2011-05-23 18:56:09 |
Brad Figg |
bug task added |
|
linux-mvl-dove (Ubuntu Oneiric) |
|
2011-05-23 18:56:09 |
Brad Figg |
bug task added |
|
linux-ti-omap4 (Ubuntu Oneiric) |
|
2011-05-23 18:58:00 |
Herton R. Krzesinski |
description |
Placeholder |
mpt2sas: prevent heap overflows and unchecked reads
At two points in handling device ioctls via /dev/mpt2ctl, user-supplied
length values are used to copy data from userspace into heap buffers
without bounds checking, allowing controllable heap corruption and
subsequently privilege escalation.
Additionally, user-supplied values are used to determine the size of a
copy_to_user() as well as the offset into the buffer to be read, with no
bounds checking, allowing users to read arbitrary kernel memory. |
|
2011-05-23 19:00:51 |
Herton R. Krzesinski |
linux (Ubuntu Hardy): status |
New |
Invalid |
|
2011-05-23 19:02:38 |
Herton R. Krzesinski |
linux (Ubuntu Lucid): importance |
Undecided |
Medium |
|
2011-05-23 19:02:38 |
Herton R. Krzesinski |
linux (Ubuntu Lucid): status |
New |
Fix Released |
|
2011-05-23 19:03:19 |
Herton R. Krzesinski |
linux (Ubuntu Natty): importance |
Undecided |
Medium |
|
2011-05-23 19:03:19 |
Herton R. Krzesinski |
linux (Ubuntu Natty): status |
New |
Fix Released |
|
2011-05-23 19:04:04 |
Herton R. Krzesinski |
linux (Ubuntu Oneiric): importance |
Undecided |
Medium |
|
2011-05-23 19:04:04 |
Herton R. Krzesinski |
linux (Ubuntu Oneiric): status |
New |
Fix Released |
|
2011-05-23 19:04:42 |
Herton R. Krzesinski |
linux (Ubuntu Maverick): importance |
Undecided |
Medium |
|
2011-05-23 19:04:42 |
Herton R. Krzesinski |
linux (Ubuntu Maverick): status |
New |
In Progress |
|
2011-05-23 19:04:42 |
Herton R. Krzesinski |
linux (Ubuntu Maverick): assignee |
|
Herton R. Krzesinski (herton) |
|
2011-05-23 20:59:14 |
Herton R. Krzesinski |
attachment added |
|
maverick backport https://bugs.launchpad.net/ubuntu/+source/linux/+bug/787145/+attachment/2140160/+files/0001-mpt2sas-prevent-heap-overflows-and-unchecked-reads-C.patch |
|
2011-05-24 17:36:02 |
Brian Murray |
bug |
|
|
added subscriber Jeremy Foshee |
2011-05-31 08:42:40 |
Paolo Pisati |
linux-fsl-imx51 (Ubuntu Hardy): status |
New |
Invalid |
|
2011-05-31 08:43:03 |
Paolo Pisati |
linux-fsl-imx51 (Ubuntu Maverick): status |
New |
Invalid |
|
2011-05-31 08:43:07 |
Paolo Pisati |
linux-fsl-imx51 (Ubuntu Natty): status |
New |
Invalid |
|
2011-05-31 08:43:11 |
Paolo Pisati |
linux-fsl-imx51 (Ubuntu Oneiric): status |
New |
Invalid |
|
2011-05-31 08:43:45 |
Paolo Pisati |
linux-mvl-dove (Ubuntu Hardy): status |
New |
Invalid |
|
2011-05-31 08:43:49 |
Paolo Pisati |
linux-mvl-dove (Ubuntu Natty): status |
New |
Invalid |
|
2011-05-31 08:43:53 |
Paolo Pisati |
linux-mvl-dove (Ubuntu Oneiric): status |
New |
Invalid |
|
2011-05-31 08:44:18 |
Paolo Pisati |
linux-ti-omap4 (Ubuntu Hardy): status |
New |
Invalid |
|
2011-05-31 08:44:21 |
Paolo Pisati |
linux-ti-omap4 (Ubuntu Lucid): status |
New |
Invalid |
|
2011-05-31 09:13:14 |
Paolo Pisati |
linux-fsl-imx51 (Ubuntu Lucid): status |
New |
In Progress |
|
2011-05-31 09:13:14 |
Paolo Pisati |
linux-fsl-imx51 (Ubuntu Lucid): assignee |
|
Paolo Pisati (p-pisati) |
|
2011-05-31 09:13:20 |
Paolo Pisati |
linux-mvl-dove (Ubuntu Lucid): status |
New |
In Progress |
|
2011-05-31 09:13:20 |
Paolo Pisati |
linux-mvl-dove (Ubuntu Lucid): assignee |
|
Paolo Pisati (p-pisati) |
|
2011-05-31 09:18:31 |
Paolo Pisati |
linux-ti-omap4 (Ubuntu Maverick): status |
New |
In Progress |
|
2011-05-31 09:18:31 |
Paolo Pisati |
linux-ti-omap4 (Ubuntu Maverick): assignee |
|
Paolo Pisati (p-pisati) |
|
2011-05-31 09:18:36 |
Paolo Pisati |
linux-ti-omap4 (Ubuntu Natty): status |
New |
In Progress |
|
2011-05-31 09:18:36 |
Paolo Pisati |
linux-ti-omap4 (Ubuntu Natty): assignee |
|
Paolo Pisati (p-pisati) |
|
2011-05-31 09:20:30 |
Paolo Pisati |
linux-ti-omap4 (Ubuntu Oneiric): status |
New |
In Progress |
|
2011-05-31 09:20:30 |
Paolo Pisati |
linux-ti-omap4 (Ubuntu Oneiric): assignee |
|
Paolo Pisati (p-pisati) |
|
2011-06-27 14:38:54 |
Launchpad Janitor |
linux (Ubuntu Maverick): status |
In Progress |
Fix Released |
|
2011-06-27 14:38:54 |
Launchpad Janitor |
cve linked |
|
2010-4529 |
|
2011-06-27 14:38:54 |
Launchpad Janitor |
cve linked |
|
2010-4565 |
|
2011-06-27 14:38:54 |
Launchpad Janitor |
cve linked |
|
2011-0463 |
|
2011-06-27 14:38:54 |
Launchpad Janitor |
cve linked |
|
2011-0711 |
|
2011-06-27 14:38:54 |
Launchpad Janitor |
cve linked |
|
2011-1016 |
|
2011-06-27 14:38:54 |
Launchpad Janitor |
cve linked |
|
2011-1017 |
|
2011-06-27 14:38:54 |
Launchpad Janitor |
cve linked |
|
2011-1169 |
|
2011-06-27 14:38:54 |
Launchpad Janitor |
cve linked |
|
2011-1748 |
|
2011-07-05 05:13:02 |
Launchpad Janitor |
linux-fsl-imx51 (Ubuntu Lucid): status |
In Progress |
Fix Released |
|
2011-07-05 05:13:02 |
Launchpad Janitor |
cve linked |
|
2010-3865 |
|
2011-07-05 05:13:02 |
Launchpad Janitor |
cve linked |
|
2010-3875 |
|
2011-07-05 05:13:02 |
Launchpad Janitor |
cve linked |
|
2010-3876 |
|
2011-07-05 05:13:02 |
Launchpad Janitor |
cve linked |
|
2010-3877 |
|
2011-07-05 05:13:02 |
Launchpad Janitor |
cve linked |
|
2010-3880 |
|
2011-07-05 05:13:02 |
Launchpad Janitor |
cve linked |
|
2010-4076 |
|
2011-07-05 05:13:02 |
Launchpad Janitor |
cve linked |
|
2010-4077 |
|
2011-07-05 05:13:02 |
Launchpad Janitor |
cve linked |
|
2010-4164 |
|
2011-07-05 05:13:02 |
Launchpad Janitor |
cve linked |
|
2010-4258 |
|
2011-07-05 05:13:02 |
Launchpad Janitor |
cve linked |
|
2010-4342 |
|
2011-07-05 05:13:02 |
Launchpad Janitor |
cve linked |
|
2010-4346 |
|
2011-07-05 05:13:02 |
Launchpad Janitor |
cve linked |
|
2010-4527 |
|
2011-07-05 05:13:02 |
Launchpad Janitor |
cve linked |
|
2010-4656 |
|
2011-07-05 05:13:02 |
Launchpad Janitor |
cve linked |
|
2011-0521 |
|
2011-07-05 05:13:02 |
Launchpad Janitor |
cve linked |
|
2011-0695 |
|
2011-07-05 05:13:02 |
Launchpad Janitor |
cve linked |
|
2011-0712 |
|
2011-07-05 10:59:46 |
Andy Whitcroft |
linux-lts-backport-maverick (Ubuntu Maverick): status |
New |
Invalid |
|
2011-07-05 10:59:48 |
Andy Whitcroft |
linux-lts-backport-maverick (Ubuntu Natty): status |
New |
Invalid |
|
2011-07-05 10:59:50 |
Andy Whitcroft |
linux-lts-backport-maverick (Ubuntu Oneiric): status |
New |
Invalid |
|
2011-07-05 10:59:53 |
Andy Whitcroft |
linux-lts-backport-maverick (Ubuntu Hardy): status |
New |
Invalid |
|
2011-07-21 13:56:51 |
Andy Whitcroft |
linux-lts-backport-maverick (Ubuntu Lucid): status |
New |
Fix Released |
|
2011-07-21 13:57:03 |
Andy Whitcroft |
linux-mvl-dove (Ubuntu Maverick): status |
New |
Fix Released |
|
2011-07-21 13:57:44 |
Andy Whitcroft |
linux-mvl-dove (Ubuntu Lucid): status |
In Progress |
Fix Released |
|
2011-07-21 13:58:03 |
Andy Whitcroft |
linux-ti-omap4 (Ubuntu Maverick): status |
In Progress |
Fix Released |
|
2011-07-21 13:58:35 |
Andy Whitcroft |
linux-ti-omap4 (Ubuntu Natty): status |
In Progress |
Fix Released |
|
2011-07-21 13:59:14 |
Andy Whitcroft |
linux-ti-omap4 (Ubuntu Oneiric): status |
In Progress |
Fix Released |
|
2011-08-24 10:23:48 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/maverick-proposed/linux-ti-omap4 |
|
2011-10-05 21:40:07 |
Jeremy Foshee |
removed subscriber Jeremy Foshee |
|
|
|