oss-security - CVE-2021-33655: Linux kernel: When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.(5.18 5.19.0-rc1)

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <420cd38c550a46e6abea9bcab3c09eb7@huawei.com>
Date: Tue, 19 Jul 2022 02:10:42 +0000
From: "Weigang (Jimmy)" <weigang12@...wei.com>
To: "oss-security@...ts.openwall.com" <oss-security@...ts.openwall.com>
CC: "openeuler-security@...neuler.org" <openeuler-security@...neuler.org>
Subject: CVE-2021-33655: Linux kernel: When sending malicous data to kernel by ioctl cmd
 FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.(5.18 5.19.0-rc1)

Fix has been released by Linux kernel upstream in 5.19-rc7: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=086ff84617185393a0bbf25830c4f36412a7d3f4.

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.