[Secure-testing-commits] r40399 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-03-15 20:40:39 +0000 (Tue, 15 Mar 2016)
New Revision: 40399

Modified:
   data/CVE/list
Log:
Update information for CVE-2016-0823/linux

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-03-15 20:38:10 UTC (rev 40398)
+++ data/CVE/list	2016-03-15 20:40:39 UTC (rev 40399)
@@ -7449,7 +7449,9 @@
 CVE-2016-0824 (libmpeg2 in libstagefright in Android 6.x before 2016-03-01 allows ...)
 	TODO: check
 CVE-2016-0823 (The pagemap_open function in fs/proc/task_mmu.c in the Linux kernel ...)
-	TODO: check
+	- linux 4.0.2-1
+	NOTE: Upstream patch: https://git.kernel.org/linus/ab676b7d6fbf4b294bf198fb27ade5b0e865c7ce (v4.0-rc5)
+	NOTE: https://googleprojectzero.blogspot.cz/2015/03/exploiting-dram-rowhammer-bug-to-gain.html
 CVE-2016-0822 (The MediaTek connectivity kernel driver in Android 6.0.1 before ...)
 	TODO: check
 CVE-2016-0821 (The LIST_POISON feature in include/linux/poison.h in the Linux kernel ...)