[Secure-testing-commits] r55508 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-09-06 14:02:26 +0000 (Wed, 06 Sep 2017)
New Revision: 55508

Modified:
   data/CVE/list
Log:
new linux issue
android NFU


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-09-06 13:56:16 UTC (rev 55507)
+++ data/CVE/list	2017-09-06 14:02:26 UTC (rev 55508)
@@ -5430,6 +5430,8 @@
 	RESERVED
 CVE-2017-12146
 	RESERVED
+	- linux <unfixed>
+	NOTE: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6265539776a0810b7ce6398c27866ddb9c6bd154
 CVE-2017-12145 (In libquicktime 1.2.4, an allocation failure was found in the function ...)
 	- libquicktime <unfixed> (unimportant)
 	NOTE: Negligable security impact
@@ -37926,6 +37928,8 @@
 	NOT-FOR-US: Mediatek driver for Android
 CVE-2017-0794
 	RESERVED
+	NOT-FOR-US: Android kernel on Nexus (probably)
+	NOTE: https://source.android.com/security/bulletin/2017-09-01 doesn't link a public patch, so probably related to some binary-only component on Nexus
 CVE-2017-0793
 	RESERVED
 	NOT-FOR-US: Imagetech driver for Android