[Secure-testing-commits] r22261 - data/CVE

[Nico Golde]

Author: nion
Date: 2013-05-14 20:27:46 +0000 (Tue, 14 May 2013)
New Revision: 22261

Modified:
   data/CVE/list
Log:
CVE-2013-2596 is not NFU

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-05-14 20:19:43 UTC (rev 22260)
+++ data/CVE/list	2013-05-14 20:27:46 UTC (rev 22261)
@@ -1941,7 +1941,9 @@
 CVE-2013-2597
 	RESERVED
 CVE-2013-2596 (Integer overflow in the fb_mmap function in drivers/video/fbmem.c in ...)
-	NOT-FOR-US: Motorola build of Android 4.1.2
+	TODO: check implications for our linux kernels
+	NOTE: the issue comes from fbmem code from linux mainline, the exploit was just targetting motorola
+	NOTE: phones that ship code that is based on the original linux code, but both are affected.
 CVE-2013-2595
 	RESERVED
 	NOT-FOR-US: Qualcomm MSM Camera driver