VOMIT (go/vomit) has received an external vulnerability report for the Linux kernel.
Advisory: CVE-2018-10074
Details: http://vomit.googleplex.com/advisory?id=CVE/CVE-2018-10074
CVSS severity score: 4.9/10.0
Description:
The hi3660_stub_clk_probe function in drivers/clk/hisilicon/clk-hi3660-stub.c in the Linux kernel before 4.16 allows local users to cause a denial of service (NULL pointer dereference) by triggering a failure of resource retrieval.
This bug was filed by http://go/vomit
Please contact us at vomit-team@google.com if you need any assistance.
Comment 1 by groeck@chromium.org
, May 23 2018Labels: Security_Severity-Medium Security_Impact-None Pri-3
Owner: groeck@chromium.org
Status: WontFix (was: Untriaged)
Upstream commit 9903e41ae1f5d ("clk: hisilicon: hi3660：Fix potential NULL dereference in hi3660_stub_clk_probe()"). The affected driver was introduced after v4.14 and does not exist in any ChromeOS branches. Marking as WontFix.