New CVE entries this week

cip-dev Pavel Machek 4 participants 5 messages Jun 10, 2021 – Jun 18, 2021

lore

Share & tools

lore

Pavel Machek

author

2021-06-10 17:05 UTC #0 lore raw

Hi!

These are the new issues this week:

Best regards,
Pavel

* 2021-06-04

CVE-2021-33200 -- BPF fix turned out to be buggy.

* 2021-06-09

CVE-2021-0606 -- EoP in GPU DRM Driver / reported by android, probably upstream commit e7cdf5c82f1773c3386b93bbcf13b9bfff29fa31 ... may be interesting?

CVE-2021-3587 -- redhat Bugzilla 1968057: CVE-2021-3587 kernel: nfc: Null pointer dereference in llcp_sock_getname

CVE-2020-36385 -- An issue was discovered in the Linux kernel before 5.8.1. net/bluetooth/hci_event.c has a slab out-of-bounds read in hci_extended_inquiry_result_evt, aka CID-51c19bf3d5cf.

CVE-2020-36387 -- An issue was discovered in the Linux kernel before 5.8.2. fs/io_uring.c has a use-after-free related to io_async_task_func and ctx reference holding, aka CID-6d816e088c35.

Signature · 2 lines

DENX Software Engineering GmbH,      Managing Director: Wolfgang Denk
HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#6501): https://lists.cip-project.org/g/cip-dev/message/6501
Mute This Topic: https://lists.cip-project.org/mt/83449660/4520388
Group Owner: [email protected]
Unsubscribe: https://lists.cip-project.org/g/cip-dev/leave/8129055/4520388/727948398/xyzzy [[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

市川正美

2021-06-17 02:45 UTC #1 lore raw

Hi!

2021年6月11日(金) 2:05 Pavel Machek <[email protected]>:

Quoted 12 lines

Hi!
These are the new issues this week:
Best regards,
Pavel
* 2021-06-04
CVE-2021-33200 -- BPF fix turned out to be buggy.

Quoted 8 lines

* 2021-06-09
CVE-2021-0606 -- EoP in GPU DRM Driver / reported by android, probably upstream commit e7cdf5c82f1773c3386b93bbcf13b9bfff29fa31 ... may be interesting?
CVE-2021-3587 -- redhat Bugzilla 1968057: CVE-2021-3587 kernel: nfc: Null pointer dereference in llcp_sock_getname
CVE-2020-36385 -- An issue was discovered in the Linux kernel before 5.8.1. net/bluetooth/hci_event.c has a slab out-of-bounds read in hci_extended_inquiry_result_evt, aka CID-51c19bf3d5cf.

According to the CVE-2020-36385.yml, it describes 'RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy'. However, the description of 'An issue was discovered in the Linux kernel before 5.8.1 ...' seems like CVE-2020-36386.

Quoted 9 lines

CVE-2020-36387 -- An issue was discovered in the Linux kernel before 5.8.2. fs/io_uring.c has a use-after-free related to io_async_task_func and ctx reference holding, aka CID-6d816e088c35.

Quoted 6 lines

--
DENX Software Engineering GmbH, Managing Director: Wolfgang Denk
HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany

Sincerely,

Signature · 5 lines

Masami Ichikawa
Cybertrust Japan Co., Ltd.

Email :[email protected]
          :[email protected]

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#6525): https://lists.cip-project.org/g/cip-dev/message/6525
Mute This Topic: https://lists.cip-project.org/mt/83449660/4520388
Group Owner: [email protected]
Unsubscribe: https://lists.cip-project.org/g/cip-dev/leave/8129055/4520388/727948398/xyzzy [[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

市川正美

2021-06-17 10:55 UTC #2 lore raw

In reply to Pavel Machek

Hi!

2021年6月11日(金) 2:05 Pavel Machek <[email protected]>:

Quoted 12 lines

Hi!
These are the new issues this week:
Best regards,
Pavel
* 2021-06-04
CVE-2021-33200 -- BPF fix turned out to be buggy.

Quoted 8 lines

* 2021-06-09
CVE-2021-0606 -- EoP in GPU DRM Driver / reported by android, probably upstream commit e7cdf5c82f1773c3386b93bbcf13b9bfff29fa31 ... may be interesting?
CVE-2021-3587 -- redhat Bugzilla 1968057: CVE-2021-3587 kernel: nfc: Null pointer dereference in llcp_sock_getname
CVE-2020-36385 -- An issue was discovered in the Linux kernel before 5.8.1. net/bluetooth/hci_event.c has a slab out-of-bounds read in hci_extended_inquiry_result_evt, aka CID-51c19bf3d5cf.

According to the CVE-2020-36385.yml it describes 'RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy'. However According to the CVE-2020-36385.yml it describes 'RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy'. However, the description of 'An issue was discovered in the Linux kernel before 5.8.1 ...' seems like CVE-2020-36386.

Quoted 9 lines

CVE-2020-36387 -- An issue was discovered in the Linux kernel before 5.8.2. fs/io_uring.c has a use-after-free related to io_async_task_func and ctx reference holding, aka CID-6d816e088c35.

Quoted 6 lines

--
DENX Software Engineering GmbH, Managing Director: Wolfgang Denk
HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#6528): https://lists.cip-project.org/g/cip-dev/message/6528
Mute This Topic: https://lists.cip-project.org/mt/83449660/4520388
Group Owner: [email protected]
Unsubscribe: https://lists.cip-project.org/g/cip-dev/leave/8129055/4520388/727948398/xyzzy [[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Masami Ichikawa

2021-06-17 11:04 UTC #3 lore raw

Hi!

Please ignore my 2nd email from [email protected]. It's my mistake.

Cheers,

Quoted 50 lines · 市川正美

Hi!
2021年6月11日(金) 2:05 Pavel Machek <[email protected]>:
Quoted 12 lines
Hi!
These are the new issues this week:
Best regards,
Pavel
* 2021-06-04
CVE-2021-33200 -- BPF fix turned out to be buggy.
Quoted 8 lines
* 2021-06-09
CVE-2021-0606 -- EoP in GPU DRM Driver / reported by android, probably upstream commit e7cdf5c82f1773c3386b93bbcf13b9bfff29fa31 ... may be interesting?
CVE-2021-3587 -- redhat Bugzilla 1968057: CVE-2021-3587 kernel: nfc: Null pointer dereference in llcp_sock_getname
CVE-2020-36385 -- An issue was discovered in the Linux kernel before 5.8.1. net/bluetooth/hci_event.c has a slab out-of-bounds read in hci_extended_inquiry_result_evt, aka CID-51c19bf3d5cf.
According to the CVE-2020-36385.yml it describes 'RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy'. However According to the CVE-2020-36385.yml it describes 'RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy'. However, the description of 'An issue was discovered in the Linux kernel before 5.8.1 ...' seems like CVE-2020-36386.
Quoted 15 lines
CVE-2020-36387 -- An issue was discovered in the Linux kernel before 5.8.2. fs/io_uring.c has a use-after-free related to io_async_task_func and ctx reference holding, aka CID-6d816e088c35.
--
DENX Software Engineering GmbH, Managing Director: Wolfgang Denk
HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany

Signature · 5 lines

/**
* Masami Ichikawa
* personal: [email protected]
* fedora project: [email protected]
*/

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#6530): https://lists.cip-project.org/g/cip-dev/message/6530
Mute This Topic: https://lists.cip-project.org/mt/83449660/4520388
Group Owner: [email protected]
Unsubscribe: https://lists.cip-project.org/g/cip-dev/leave/8129055/4520388/727948398/xyzzy [[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Pavel Machek

author

2021-06-18 08:01 UTC #4 lore raw

In reply to 市川正美

Hi!

Quoted 9 lines

Quoted 2 lines
CVE-2020-36385 -- An issue was discovered in the Linux kernel before 5.8.1. net/bluetooth/hci_event.c has a slab out-of-bounds read in hci_extended_inquiry_result_evt, aka CID-51c19bf3d5cf.
According to the CVE-2020-36385.yml it describes 'RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy'. However According to the CVE-2020-36385.yml it describes 'RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy'. However, the description of 'An issue was discovered in the Linux kernel before 5.8.1 ...' seems like CVE-2020-36386.

You are right, something went wrong with the import. It is corrected now.

Best regards,
Pavel

Signature · 2 lines

DENX Software Engineering GmbH,      Managing Director: Wolfgang Denk
HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#6534): https://lists.cip-project.org/g/cip-dev/message/6534
Mute This Topic: https://lists.cip-project.org/mt/83449660/4520388
Group Owner: [email protected]
Unsubscribe: https://lists.cip-project.org/g/cip-dev/leave/8129055/4520388/727948398/xyzzy [[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-