New issue
Advanced search Search tips

Issue 738670 link

Starred by 1 user
Status: Duplicate
Merged: issue 738669
Owner:
groeck@chromium.org
Closed: Jul 2017
Cc:
chromeos-kernel-security-bug-access@google.com
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: ----
Type: Bug-Security



Sign in to add a comment

CrOS: CVE-2017-9985: Vulnerability reported in Linux kernel

Project Member Reported by vomit.go...@appspot.gserviceaccount.com, Jul 1 2017 
VOMIT (go/vomit) has received an external vulnerability report for the Linux kernel. 

Advisory: CVE-2017-9985
  Details: http://vomit.googleplex.com/advisory?id=CVE/CVE-2017-9985
  CVSS severity score: 7.2/10.0
  Description:

The snd_msndmidi_input_read function in sound/isa/msnd/msnd_midi.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service (over-boundary access) or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, aka a "double fetch" vulnerability.



This bug was filed by http://go/vomit
Please contact us at vomit-team@google.com if you need any assistance.

Comment 1 by dominickn@chromium.org, Jul 3 2017

Components: OS>Kernel
Owner: groeck@chromium.org
Status: Assigned (was: Untriaged)
Over to groeck@ and the ChromeOS kernel team

Comment 2 by groeck@chromium.org, Jul 3 2017

Mergedinto: 738669
Status: Duplicate (was: Assigned)
Summary: CrOS: CVE-2017-9985: Vulnerability reported in Linux kernel (was: CrOS: Vulnerability reported in Linux kernel)
See https://bugzilla.kernel.org/show_bug.cgi?id=196133. Considered a duplicate of 738669 and thus CVE-2017-9984. Marking as such.
Project Member

Comment 3 by sheriffbot@chromium.org, Oct 10 2017

Labels: allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
►

Sign in to add a comment