oss-sec mailing list archives

Re: Can someone explain all the CONFIG_VMAP_STACK CVEs lately?


From: Greg KH <greg () kroah com>
Date: Mon, 26 Jun 2017 08:43:55 +0200

On Sun, Jun 25, 2017 at 08:49:43PM -0700, Andy Lutomirski wrote:
I haven't checked what USB does, but I suspect it's a wildly
out-of-bounds DMA transfer that's more likely to result in a
straight-up abort than easily exploitable corruption.

For USB, yes, it's just a totally failed DMA transaction and the driver
will not work at all.  It's been that way since the 2.2 kernel days,
nothing new there, it's just that this can now happen on "common"
architectures :)

thanks,

greg k-h


Current thread: