答复: infiniband vulnerability report

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



>On Thu, Apr 12, 2018 at 01:54:47AM +0000, 连一汉 wrote:
>> 
>> Hi, I’m not sure if you receive this email, so I send it again.
>> 
>> I’m Lian yihan, a security researcher of Qihoo 360 GearTeam.
>> 
>> I found a vulnerability of Linux driver infiniband of linux-4.14.33. 

>Is this also in 4.16.1?  Lots of IB stuff has been fixed recently.

I also reproduce the first bug in 4.16.1. 

As for the second bug, "cmd.optval" has been changed to "cmd.optlen", so it doesn't have this bug :).

>And IB developers, any ideas here?  Any chance you all can start properly marking patches for stable kernels?  :)

>thanks,

>greg k-h
��.n��������+%������w��{.n�����{���fk��ܨ}���Ơz�j:+v�����w����ޙ��&�)ߡ�a����z�ޗ���ݢj��w�f




[Index of Archives]     [Linux USB Devel]     [Video for Linux]     [Linux Audio Users]     [Photo]     [Yosemite News]     [Yosemite Photos]     [Linux Kernel]     [Linux SCSI]     [XFree86]

  Powered by Linux