Files
i2som-imx-linux/include/linux
Kees Cook 676bb9a417 HID: validate HID report id size
commit 43622021d2 upstream.

The "Report ID" field of a HID report is used to build indexes of
reports. The kernel's index of these is limited to 256 entries, so any
malicious device that sets a Report ID greater than 255 will trigger
memory corruption on the host:

[ 1347.156239] BUG: unable to handle kernel paging request at ffff88094958a878
[ 1347.156261] IP: [<ffffffff813e4da0>] hid_register_report+0x2a/0x8b

CVE-2013-2888

Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2013-09-26 17:15:34 -07:00
..
2012-11-26 11:38:03 -08:00
2012-04-23 14:23:32 +03:00
2012-04-27 11:03:38 -06:00
2012-11-17 13:16:12 -08:00
2012-04-12 12:57:08 +02:00
2012-04-27 10:46:45 +08:00
2013-09-26 17:15:34 -07:00
2013-07-28 16:25:59 -07:00
2012-10-02 10:30:35 -07:00
2012-08-15 08:10:29 -07:00
2012-07-19 08:59:00 -07:00
2013-04-16 21:27:26 -07:00
2012-10-02 10:30:05 -07:00
2012-12-17 10:37:42 -08:00
2013-04-25 21:19:56 -07:00
2012-08-09 08:31:30 -07:00
2013-07-03 10:59:06 -07:00
2012-08-15 08:10:29 -07:00
2013-01-11 09:07:15 -08:00
2012-07-16 09:04:42 -07:00
2012-04-10 22:39:17 -06:00
2013-04-05 10:04:40 -07:00
2012-04-11 09:36:00 +01:00
2013-08-04 16:26:03 +08:00