| commit | 3e65ea5e9b796afe1a157d90a4cd98d91212c5d5 | [log] [tgz] |
|---|---|---|
| author | Jeron Susan <jeron.susan@hi-p.com> | Thu Aug 25 17:13:01 2016 +0800 |
| committer | Jeron Susan <jeron.susan@hi-p.com> | Thu Aug 25 17:13:10 2016 +0800 |
| tree | 5526712192297ca1ce825d1869290e8e9680bd83 | |
| parent | 638ea1359d6ced0554ec61eeac840ef98b1c645b [diff] |
FPII-2319: Elevation of privilege vulnerability in kernel netfilter subsystem CVE-2016-3134 A-28940694 The netfilter subsystem in the Linux kernel through 4.5.2 does not validate certain offset fields, which allows local users to gain privileges or cause a denial of service (heap memory corruption) via an IPT_SO_SET_REPLACE setsockopt call. The fix is designed to add an additional check in the unconditional function. Change-Id: I46129d08c0ea4f149da2c92a930d00ba32aeaa7b