[SRU][Trusty][PATCH 0/1] Fix for CVE-2017-11473

Kleber Sacilotto de Souza kleber.souza at canonical.com
Tue Jul 10 17:28:24 UTC 2018


https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-11473.html

  Buffer overflow in the mp_override_legacy_irq() function in
  arch/x86/kernel/acpi/boot.c in the Linux kernel through 4.12.2 allows local
  users to gain privileges via a crafted ACPI table.

Clean cherry-pick of the upstream commit.

Seunghun Han (1):
  x86/acpi: Prevent out of bound access caused by broken ACPI tables

 arch/x86/kernel/acpi/boot.c | 8 ++++++++
 1 file changed, 8 insertions(+)

-- 
2.17.1





More information about the kernel-team mailing list