kernel-packages team mailing list archive

[Mathew Hodson <mathew.hodson@xxxxxxxxx>]

** Changed in: linux (Ubuntu)
       Status: New => Invalid

** Changed in: linux (Ubuntu Trusty)
       Status: New => Invalid

** Description changed:

- The Gemini JPEG encoder and the Jpeg1.0 common encoder/decoder engines
- of the camera driver are not properly initializing all members of a
- structure before copying it to user space. This allows a local attacker
- to obtain potentially sensitive information from kernel stack memory via
- ioctl system calls.
+ The MSM camera driver for the Linux kernel 3.x, as used in Qualcomm
+ Innovation Center (QuIC) Android contributions for MSM devices and other
+ products, allows attackers to obtain sensitive information from kernel
+ stack memory via (1) a crafted MSM_MCR_IOCTL_EVT_GET ioctl call, related to
+ drivers/media/platform/msm/camera_v1/mercury/msm_mercury_sync.c, or (2) a
+ crafted MSM_JPEG_IOCTL_EVT_GET ioctl call, related to
+ drivers/media/platform/msm/camera_v2/jpeg_10/msm_jpeg_sync.c.
  
  Break-Fix: - 8604847927f952cc8e773b97eca24e1060a570f2

** Changed in: linux-ti-omap4 (Ubuntu)
       Status: New => Invalid

** Changed in: linux-ti-omap4 (Ubuntu Trusty)
       Status: New => Invalid

** Changed in: linux-lts-quantal (Ubuntu Precise)
       Status: New => Invalid

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux-armadaxp in Ubuntu.
https://bugs.launchpad.net/bugs/1244804

Title:
  CVE-2013-4739

Status in linux package in Ubuntu:
  Invalid
Status in linux-armadaxp package in Ubuntu:
  Invalid
Status in linux-ec2 package in Ubuntu:
  Invalid
Status in linux-fsl-imx51 package in Ubuntu:
  Invalid
Status in linux-lts-backport-maverick package in Ubuntu:
  Won't Fix
Status in linux-lts-backport-natty package in Ubuntu:
  Won't Fix
Status in linux-lts-quantal package in Ubuntu:
  Invalid
Status in linux-lts-raring package in Ubuntu:
  Invalid
Status in linux-mvl-dove package in Ubuntu:
  Invalid
Status in linux-ti-omap4 package in Ubuntu:
  Invalid
Status in linux source package in Lucid:
  New
Status in linux-armadaxp source package in Lucid:
  Invalid
Status in linux-ec2 source package in Lucid:
  New
Status in linux-fsl-imx51 source package in Lucid:
  Invalid
Status in linux-lts-backport-maverick source package in Lucid:
  Won't Fix
Status in linux-lts-backport-natty source package in Lucid:
  Won't Fix
Status in linux-lts-quantal source package in Lucid:
  Invalid
Status in linux-lts-raring source package in Lucid:
  Invalid
Status in linux-mvl-dove source package in Lucid:
  Invalid
Status in linux-ti-omap4 source package in Lucid:
  Invalid
Status in linux source package in Precise:
  New
Status in linux-armadaxp source package in Precise:
  New
Status in linux-ec2 source package in Precise:
  Invalid
Status in linux-fsl-imx51 source package in Precise:
  Invalid
Status in linux-lts-backport-maverick source package in Precise:
  Won't Fix
Status in linux-lts-backport-natty source package in Precise:
  Won't Fix
Status in linux-lts-quantal source package in Precise:
  Invalid
Status in linux-lts-raring source package in Precise:
  Won't Fix
Status in linux-mvl-dove source package in Precise:
  Invalid
Status in linux-ti-omap4 source package in Precise:
  New
Status in linux source package in Quantal:
  Won't Fix
Status in linux-armadaxp source package in Quantal:
  Won't Fix
Status in linux-ec2 source package in Quantal:
  Invalid
Status in linux-fsl-imx51 source package in Quantal:
  Invalid
Status in linux-lts-backport-maverick source package in Quantal:
  Won't Fix
Status in linux-lts-backport-natty source package in Quantal:
  Won't Fix
Status in linux-lts-quantal source package in Quantal:
  Invalid
Status in linux-lts-raring source package in Quantal:
  Invalid
Status in linux-mvl-dove source package in Quantal:
  Invalid
Status in linux-ti-omap4 source package in Quantal:
  Won't Fix
Status in linux source package in Raring:
  Won't Fix
Status in linux-armadaxp source package in Raring:
  Invalid
Status in linux-ec2 source package in Raring:
  Invalid
Status in linux-fsl-imx51 source package in Raring:
  Invalid
Status in linux-lts-backport-maverick source package in Raring:
  Won't Fix
Status in linux-lts-backport-natty source package in Raring:
  Won't Fix
Status in linux-lts-quantal source package in Raring:
  Invalid
Status in linux-lts-raring source package in Raring:
  Invalid
Status in linux-mvl-dove source package in Raring:
  Invalid
Status in linux-ti-omap4 source package in Raring:
  Won't Fix
Status in linux source package in Saucy:
  Won't Fix
Status in linux-armadaxp source package in Saucy:
  Invalid
Status in linux-ec2 source package in Saucy:
  Invalid
Status in linux-fsl-imx51 source package in Saucy:
  Invalid
Status in linux-lts-backport-maverick source package in Saucy:
  Won't Fix
Status in linux-lts-backport-natty source package in Saucy:
  Won't Fix
Status in linux-lts-quantal source package in Saucy:
  Invalid
Status in linux-lts-raring source package in Saucy:
  Invalid
Status in linux-mvl-dove source package in Saucy:
  Invalid
Status in linux-ti-omap4 source package in Saucy:
  Won't Fix
Status in linux source package in Trusty:
  Invalid
Status in linux-armadaxp source package in Trusty:
  Invalid
Status in linux-ec2 source package in Trusty:
  Invalid
Status in linux-fsl-imx51 source package in Trusty:
  Invalid
Status in linux-lts-backport-maverick source package in Trusty:
  Won't Fix
Status in linux-lts-backport-natty source package in Trusty:
  Won't Fix
Status in linux-lts-quantal source package in Trusty:
  Invalid
Status in linux-lts-raring source package in Trusty:
  Invalid
Status in linux-mvl-dove source package in Trusty:
  Invalid
Status in linux-ti-omap4 source package in Trusty:
  Invalid

Bug description:
  The MSM camera driver for the Linux kernel 3.x, as used in Qualcomm
  Innovation Center (QuIC) Android contributions for MSM devices and other
  products, allows attackers to obtain sensitive information from kernel
  stack memory via (1) a crafted MSM_MCR_IOCTL_EVT_GET ioctl call, related to
  drivers/media/platform/msm/camera_v1/mercury/msm_mercury_sync.c, or (2) a
  crafted MSM_JPEG_IOCTL_EVT_GET ioctl call, related to
  drivers/media/platform/msm/camera_v2/jpeg_10/msm_jpeg_sync.c.

  Break-Fix: - 8604847927f952cc8e773b97eca24e1060a570f2

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1244804/+subscriptions