New issue
Advanced search Search tips

Issue 734328 link

Starred by 1 user
Status: Archived
Owner:
groeck@chromium.org
Closed: Jul 2017
Cc:
jorgelo@chromium.org
chromeos-kernel-security-bug-access@google.com
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 2
Type: Bug-Security



Sign in to add a comment

CrOS: CVE-2017-0651: Vulnerability reported in Linux kernel

Project Member Reported by vomit.go...@appspot.gserviceaccount.com, Jun 17 2017 
VOMIT (go/vomit) has received an external vulnerability report for the Linux kernel. 

Advisory: CVE-2017-0651
  Details: http://vomit.googleplex.com/advisory?id=CVE/CVE-2017-0651
  CVSS severity score: 2.6/10.0
  Description:

An information disclosure vulnerability in the kernel ION subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Low because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-35644815.



This bug was filed by http://go/vomit
Please contact us at vomit-team@google.com if you need any assistance.

Comment 1 by est...@chromium.org, Jun 17 2017

Owner: jorgelo@chromium.org
Status: Assigned (was: Untriaged)
Over to jorgelo for triage, please

Comment 2 by jorgelo@chromium.org, Jun 19 2017

Cc: jorgelo@chromium.org
Owner: groeck@chromium.org
Over to Guenter.

We should probably cherry-pick this assuming we have the ION subsystem enabled for ARC++.

Comment 3 by groeck@chromium.org, Jun 19 2017

Labels: Security_Severity-Low Security_Impact-Stable Pri-2
Summary: CrOS: CVE-2017-0651: Vulnerability reported in Linux kernel (was: CrOS: Vulnerability reported in Linux kernel)
Affects cromeos-3.18.
Ref. dragon commit 2941a7f90fea34fd15a4f33a38d064040558c86c.
Low severity (requires crafted application to cause info leak).

Comment 4 by dominickn@chromium.org, Jun 21 2017

Components: OS>Kernel

Comment 5 by groeck@chromium.org, Jul 6 2017

Status: Fixed (was: Assigned)
Fixed with CL:540262.
Project Member

Comment 6 by sheriffbot@chromium.org, Jul 7 2017

Labels: Restrict-View-SecurityNotify
Project Member

Comment 7 by sheriffbot@chromium.org, Oct 13 2017

Labels: -Restrict-View-SecurityNotify allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Comment 8 by dchan@chromium.org, Jan 22 2018

Status: Archived (was: Fixed)
►

Sign in to add a comment