VOMIT (go/vomit) has received an external vulnerability report for the Linux kernel.
Advisory: CVE-2017-18261
Details: http://vomit.googleplex.com/advisory?id=CVE/CVE-2017-18261
CVSS severity score: 4.9/10.0
Description:
The arch_timer_reg_read_stable macro in arch/arm64/include/asm/arch_timer.h in the Linux kernel before 4.13 allows local users to cause a denial of service (infinite recursion) by writing to a file under /sys/kernel/debug in certain circumstances, as demonstrated by a scenario involving debugfs, ftrace, PREEMPT_TRACER, and FUNCTION_GRAPH_TRACER.
This bug was filed by http://go/vomit
Please contact us at vomit-team@google.com if you need any assistance.
Comment 1 by groeck@chromium.org
, May 23 2018Labels: Security_Severity-Medium Security_Impact-None Pri-3
Owner: groeck@chromium.org
Status: WontFix (was: Untriaged)
Upstream commit adb4f11e0a8 ("clocksource/drivers/arm_arch_timer: Avoid infinite recursion when ftrace is enabled"). chromeos-4.14 is not affected. The problem was introduced with commit 6acc71ccac7187 ("arm64: arch_timer: Allows a CPU-specific erratum to only affect a subset of CPUs") which is not in chromeos-4.4 or older kernels. No action required.