[PATCH 0/1] [linux-hwe-5.0, linux-gcp-5.0] CVE-2019-12380

[Kleber Souza]

On 2020-06-08 20:50, Benjamin M Romer wrote:
> An issue was discovered in the efi subsystem in the Linux
> kernel through 5.1.5. phys_efi_set_virtual_address_map in
> arch/x86/platform/efi/efi.c and efi_call_phys_prolog in
> arch/x86/platform/efi/efi_64.c mishandle memory allocation failures. 
> 
> NOTE:
> This id is disputed as not being an issue because “All the code touched by
> the referenced commit runs only at boot, before any user processes are
> started. Therefore, there is no possibility for an unprivileged user to
> control it.”.
> 
> Gen Zhang (1):
>   efi/x86/Add missing error handling to old_memmap 1:1 mapping code
> 
>  arch/x86/platform/efi/efi.c    | 2 ++
>  arch/x86/platform/efi/efi_64.c | 9 ++++++---
>  2 files changed, 8 insertions(+), 3 deletions(-)
> 

Hi Ben,

We are still "supporting" Disco in the sense that we apply patches to the tree
but don't build the packages, and this tree is used as the base for all the 5.0
kernels that we have in Bionic. So sending a patch for "Disco" it will be
automatically be fixed for all 5.0 kernels.

Thanks,
Kleber


Note when applying this patch: please apply it to the disco/linux tree.