kernel-packages team mailing list archive

Thread
Date
[Bug 1508323] Re: CVE-2013-7445

To: kernel-packages@xxxxxxxxxxxxxxxxxxx
From: Steve Beattie <sbeattie@xxxxxxxxxx>
Date: Wed, 21 Oct 2015 06:53:36 -0000
Reply-to: Bug 1508323 <1508323@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx
CVE-2013-7445

** Also affects: linux (Ubuntu Wily)
   Importance: Undecided
       Status: New

** Also affects: linux-fsl-imx51 (Ubuntu Wily)
   Importance: Undecided
       Status: New

** Also affects: linux-mvl-dove (Ubuntu Wily)
   Importance: Undecided
       Status: New

** Also affects: linux-ec2 (Ubuntu Wily)
   Importance: Undecided
       Status: New

** Also affects: linux-ti-omap4 (Ubuntu Wily)
   Importance: Undecided
       Status: New

** Also affects: linux-lts-backport-maverick (Ubuntu Wily)
   Importance: Undecided
       Status: New

** Also affects: linux-lts-backport-natty (Ubuntu Wily)
   Importance: Undecided
       Status: New

** Also affects: linux (Ubuntu Vivid)
   Importance: Undecided
       Status: New

** Also affects: linux-fsl-imx51 (Ubuntu Vivid)
   Importance: Undecided
       Status: New

** Also affects: linux-mvl-dove (Ubuntu Vivid)
   Importance: Undecided
       Status: New

** Also affects: linux-ec2 (Ubuntu Vivid)
   Importance: Undecided
       Status: New

** Also affects: linux-ti-omap4 (Ubuntu Vivid)
   Importance: Undecided
       Status: New

** Also affects: linux-lts-backport-maverick (Ubuntu Vivid)
   Importance: Undecided
       Status: New

** Also affects: linux-lts-backport-natty (Ubuntu Vivid)
   Importance: Undecided
       Status: New

** Also affects: linux (Ubuntu Trusty)
   Importance: Undecided
       Status: New

** Also affects: linux-fsl-imx51 (Ubuntu Trusty)
   Importance: Undecided
       Status: New

** Also affects: linux-mvl-dove (Ubuntu Trusty)
   Importance: Undecided
       Status: New

** Also affects: linux-ec2 (Ubuntu Trusty)
   Importance: Undecided
       Status: New

** Also affects: linux-ti-omap4 (Ubuntu Trusty)
   Importance: Undecided
       Status: New

** Also affects: linux-lts-backport-maverick (Ubuntu Trusty)
   Importance: Undecided
       Status: New

** Also affects: linux-lts-backport-natty (Ubuntu Trusty)
   Importance: Undecided
       Status: New

** Also affects: linux (Ubuntu Precise)
   Importance: Undecided
       Status: New

** Also affects: linux-fsl-imx51 (Ubuntu Precise)
   Importance: Undecided
       Status: New

** Also affects: linux-mvl-dove (Ubuntu Precise)
   Importance: Undecided
       Status: New

** Also affects: linux-ec2 (Ubuntu Precise)
   Importance: Undecided
       Status: New

** Also affects: linux-ti-omap4 (Ubuntu Precise)
   Importance: Undecided
       Status: New

** Also affects: linux-lts-backport-maverick (Ubuntu Precise)
   Importance: Undecided
       Status: New

** Also affects: linux-lts-backport-natty (Ubuntu Precise)
   Importance: Undecided
       Status: New

** Changed in: linux-lts-trusty (Ubuntu Wily)
       Status: New => Invalid

** Changed in: linux-lts-trusty (Ubuntu Vivid)
       Status: New => Invalid

** Changed in: linux-lts-trusty (Ubuntu Trusty)
       Status: New => Invalid

** Changed in: linux-lts-quantal (Ubuntu Wily)
       Status: New => Invalid

** Changed in: linux-lts-quantal (Ubuntu Vivid)
       Status: New => Invalid

** Changed in: linux-lts-quantal (Ubuntu Trusty)
       Status: New => Invalid

** Changed in: linux-ti-omap4 (Ubuntu Wily)
       Status: New => Invalid

** Changed in: linux-ti-omap4 (Ubuntu Vivid)
       Status: New => Invalid

** Changed in: linux-ti-omap4 (Ubuntu Trusty)
       Status: New => Invalid

** Changed in: linux-lts-raring (Ubuntu Wily)
       Status: New => Invalid

** Changed in: linux-lts-raring (Ubuntu Vivid)
       Status: New => Invalid

** Changed in: linux-lts-raring (Ubuntu Trusty)
       Status: New => Invalid

** Changed in: linux-armadaxp (Ubuntu Wily)
       Status: New => Invalid

** Changed in: linux-armadaxp (Ubuntu Vivid)
       Status: New => Invalid

** Changed in: linux-armadaxp (Ubuntu Trusty)
       Status: New => Invalid

** Changed in: linux-mvl-dove (Ubuntu Precise)
       Status: New => Invalid

** Changed in: linux-mvl-dove (Ubuntu Wily)
       Status: New => Invalid

** Changed in: linux-mvl-dove (Ubuntu Vivid)
       Status: New => Invalid

** Changed in: linux-mvl-dove (Ubuntu Trusty)
       Status: New => Invalid

** Changed in: linux-lts-saucy (Ubuntu Wily)
       Status: New => Invalid

** Changed in: linux-lts-saucy (Ubuntu Vivid)
       Status: New => Invalid

** Changed in: linux-lts-saucy (Ubuntu Trusty)
       Status: New => Invalid

** Changed in: linux-manta (Ubuntu Precise)
       Status: New => Invalid

** Changed in: linux-ec2 (Ubuntu Precise)
       Status: New => Invalid

** Changed in: linux-ec2 (Ubuntu Wily)
       Status: New => Invalid

** Changed in: linux-ec2 (Ubuntu Vivid)
       Status: New => Invalid

** Changed in: linux-ec2 (Ubuntu Trusty)
       Status: New => Invalid

** Changed in: linux-lts-vivid (Ubuntu Precise)
       Status: New => Invalid

** Changed in: linux-lts-vivid (Ubuntu Wily)
       Status: New => Invalid

** Changed in: linux-lts-vivid (Ubuntu Vivid)
       Status: New => Invalid

** Changed in: linux-mako (Ubuntu Precise)
       Status: New => Invalid

** Changed in: linux-fsl-imx51 (Ubuntu Precise)
       Status: New => Invalid

** Changed in: linux-fsl-imx51 (Ubuntu Wily)
       Status: New => Invalid

** Changed in: linux-fsl-imx51 (Ubuntu Vivid)
       Status: New => Invalid

** Changed in: linux-fsl-imx51 (Ubuntu Trusty)
       Status: New => Invalid

** Changed in: linux-lts-utopic (Ubuntu Precise)
       Status: New => Invalid

** Changed in: linux-lts-utopic (Ubuntu Wily)
       Status: New => Invalid

** Changed in: linux-lts-utopic (Ubuntu Vivid)
       Status: New => Invalid

** Changed in: linux-goldfish (Ubuntu Precise)
       Status: New => Invalid

** Changed in: linux-flo (Ubuntu Precise)
       Status: New => Invalid

** Description changed:

- Placeholder
+ The Direct Rendering Manager (DRM) subsystem in the Linux kernel through
+ 4.x mishandles requests for Graphics Execution Manager (GEM) objects,
+ which allows context-dependent attackers to cause a denial of service
+ (memory consumption) via an application that processes graphics data, as
+ demonstrated by JavaScript code that creates many CANVAS elements for
+ rendering by Chrome or Firefox.

** Changed in: linux-lts-trusty (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: linux-lts-trusty (Ubuntu Wily)
   Importance: Undecided => High

** Changed in: linux-lts-trusty (Ubuntu Vivid)
   Importance: Undecided => High

** Changed in: linux-lts-trusty (Ubuntu Trusty)
   Importance: Undecided => High

** Changed in: linux-lts-quantal (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: linux-lts-quantal (Ubuntu Wily)
   Importance: Undecided => High

** Changed in: linux-lts-quantal (Ubuntu Vivid)
   Importance: Undecided => High

** Changed in: linux-lts-quantal (Ubuntu Trusty)
   Importance: Undecided => High

** Changed in: linux (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: linux (Ubuntu Wily)
   Importance: Undecided => High

** Changed in: linux (Ubuntu Vivid)
   Importance: Undecided => High

** Changed in: linux (Ubuntu Trusty)
   Importance: Undecided => High

** Changed in: linux-ti-omap4 (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: linux-ti-omap4 (Ubuntu Wily)
   Importance: Undecided => High

** Changed in: linux-ti-omap4 (Ubuntu Vivid)
   Importance: Undecided => High

** Changed in: linux-ti-omap4 (Ubuntu Trusty)
   Importance: Undecided => High

** Changed in: linux-lts-raring (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: linux-lts-raring (Ubuntu Wily)
   Importance: Undecided => High

** Changed in: linux-lts-raring (Ubuntu Vivid)
   Importance: Undecided => High

** Changed in: linux-lts-raring (Ubuntu Trusty)
   Importance: Undecided => High

** Changed in: linux-armadaxp (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: linux-armadaxp (Ubuntu Wily)
   Importance: Undecided => High

** Changed in: linux-armadaxp (Ubuntu Vivid)
   Importance: Undecided => High

** Changed in: linux-armadaxp (Ubuntu Trusty)
   Importance: Undecided => High

** Changed in: linux-mvl-dove (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: linux-mvl-dove (Ubuntu Wily)
   Importance: Undecided => High

** Changed in: linux-mvl-dove (Ubuntu Vivid)
   Importance: Undecided => High

** Changed in: linux-mvl-dove (Ubuntu Trusty)
   Importance: Undecided => High

** Changed in: linux-lts-saucy (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: linux-lts-saucy (Ubuntu Wily)
   Importance: Undecided => High

** Changed in: linux-lts-saucy (Ubuntu Vivid)
   Importance: Undecided => High

** Changed in: linux-lts-saucy (Ubuntu Trusty)
   Importance: Undecided => High

** Changed in: linux-manta (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: linux-manta (Ubuntu Wily)
   Importance: Undecided => High

** Changed in: linux-manta (Ubuntu Vivid)
   Importance: Undecided => High

** Changed in: linux-manta (Ubuntu Trusty)
       Status: New => Invalid

** Changed in: linux-manta (Ubuntu Trusty)
   Importance: Undecided => High

** Changed in: linux-ec2 (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: linux-ec2 (Ubuntu Wily)
   Importance: Undecided => High

** Changed in: linux-ec2 (Ubuntu Vivid)
   Importance: Undecided => High

** Changed in: linux-ec2 (Ubuntu Trusty)
   Importance: Undecided => High

** Changed in: linux-lts-vivid (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: linux-lts-vivid (Ubuntu Wily)
   Importance: Undecided => High

** Changed in: linux-lts-vivid (Ubuntu Vivid)
   Importance: Undecided => High

** Changed in: linux-lts-vivid (Ubuntu Trusty)
   Importance: Undecided => High

** Changed in: linux-mako (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: linux-mako (Ubuntu Wily)
   Importance: Undecided => High

** Changed in: linux-mako (Ubuntu Vivid)
   Importance: Undecided => High

** Changed in: linux-mako (Ubuntu Trusty)
       Status: New => Invalid

** Changed in: linux-mako (Ubuntu Trusty)
   Importance: Undecided => High

** Changed in: linux-fsl-imx51 (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: linux-fsl-imx51 (Ubuntu Wily)
   Importance: Undecided => High

** Changed in: linux-fsl-imx51 (Ubuntu Vivid)
   Importance: Undecided => High

** Changed in: linux-fsl-imx51 (Ubuntu Trusty)
   Importance: Undecided => High

** Changed in: linux-lts-utopic (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: linux-lts-utopic (Ubuntu Wily)
   Importance: Undecided => High

** Changed in: linux-lts-utopic (Ubuntu Vivid)
   Importance: Undecided => High

** Changed in: linux-lts-utopic (Ubuntu Trusty)
   Importance: Undecided => High

** Changed in: linux-goldfish (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: linux-goldfish (Ubuntu Wily)
   Importance: Undecided => High

** Changed in: linux-goldfish (Ubuntu Vivid)
   Importance: Undecided => High

** Changed in: linux-goldfish (Ubuntu Trusty)
       Status: New => Invalid

** Changed in: linux-goldfish (Ubuntu Trusty)
   Importance: Undecided => High

** Changed in: linux-flo (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: linux-flo (Ubuntu Wily)
   Importance: Undecided => High

** Changed in: linux-flo (Ubuntu Vivid)
   Importance: Undecided => High

** Changed in: linux-flo (Ubuntu Trusty)
       Status: New => Invalid

** Changed in: linux-flo (Ubuntu Trusty)
   Importance: Undecided => High

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1508323

Title:
  CVE-2013-7445

Status in linux package in Ubuntu:
  New
Status in linux-armadaxp package in Ubuntu:
  Invalid
Status in linux-ec2 package in Ubuntu:
  Invalid
Status in linux-flo package in Ubuntu:
  New
Status in linux-fsl-imx51 package in Ubuntu:
  Invalid
Status in linux-goldfish package in Ubuntu:
  New
Status in linux-lts-backport-maverick package in Ubuntu:
  New
Status in linux-lts-backport-natty package in Ubuntu:
  New
Status in linux-lts-quantal package in Ubuntu:
  Invalid
Status in linux-lts-raring package in Ubuntu:
  Invalid
Status in linux-lts-saucy package in Ubuntu:
  Invalid
Status in linux-lts-trusty package in Ubuntu:
  Invalid
Status in linux-lts-utopic package in Ubuntu:
  Invalid
Status in linux-lts-vivid package in Ubuntu:
  Invalid
Status in linux-mako package in Ubuntu:
  New
Status in linux-manta package in Ubuntu:
  New
Status in linux-mvl-dove package in Ubuntu:
  Invalid
Status in linux-ti-omap4 package in Ubuntu:
  Invalid
Status in linux source package in Precise:
  New
Status in linux-armadaxp source package in Precise:
  New
Status in linux-ec2 source package in Precise:
  Invalid
Status in linux-flo source package in Precise:
  Invalid
Status in linux-fsl-imx51 source package in Precise:
  Invalid
Status in linux-goldfish source package in Precise:
  Invalid
Status in linux-lts-backport-maverick source package in Precise:
  New
Status in linux-lts-backport-natty source package in Precise:
  New
Status in linux-lts-quantal source package in Precise:
  New
Status in linux-lts-raring source package in Precise:
  New
Status in linux-lts-saucy source package in Precise:
  New
Status in linux-lts-trusty source package in Precise:
  New
Status in linux-lts-utopic source package in Precise:
  Invalid
Status in linux-lts-vivid source package in Precise:
  Invalid
Status in linux-mako source package in Precise:
  Invalid
Status in linux-manta source package in Precise:
  Invalid
Status in linux-mvl-dove source package in Precise:
  Invalid
Status in linux-ti-omap4 source package in Precise:
  New
Status in linux source package in Trusty:
  New
Status in linux-armadaxp source package in Trusty:
  Invalid
Status in linux-ec2 source package in Trusty:
  Invalid
Status in linux-flo source package in Trusty:
  Invalid
Status in linux-fsl-imx51 source package in Trusty:
  Invalid
Status in linux-goldfish source package in Trusty:
  Invalid
Status in linux-lts-backport-maverick source package in Trusty:
  New
Status in linux-lts-backport-natty source package in Trusty:
  New
Status in linux-lts-quantal source package in Trusty:
  Invalid
Status in linux-lts-raring source package in Trusty:
  Invalid
Status in linux-lts-saucy source package in Trusty:
  Invalid
Status in linux-lts-trusty source package in Trusty:
  Invalid
Status in linux-lts-utopic source package in Trusty:
  New
Status in linux-lts-vivid source package in Trusty:
  New
Status in linux-mako source package in Trusty:
  Invalid
Status in linux-manta source package in Trusty:
  Invalid
Status in linux-mvl-dove source package in Trusty:
  Invalid
Status in linux-ti-omap4 source package in Trusty:
  Invalid
Status in linux source package in Vivid:
  New
Status in linux-armadaxp source package in Vivid:
  Invalid
Status in linux-ec2 source package in Vivid:
  Invalid
Status in linux-flo source package in Vivid:
  New
Status in linux-fsl-imx51 source package in Vivid:
  Invalid
Status in linux-goldfish source package in Vivid:
  New
Status in linux-lts-backport-maverick source package in Vivid:
  New
Status in linux-lts-backport-natty source package in Vivid:
  New
Status in linux-lts-quantal source package in Vivid:
  Invalid
Status in linux-lts-raring source package in Vivid:
  Invalid
Status in linux-lts-saucy source package in Vivid:
  Invalid
Status in linux-lts-trusty source package in Vivid:
  Invalid
Status in linux-lts-utopic source package in Vivid:
  Invalid
Status in linux-lts-vivid source package in Vivid:
  Invalid
Status in linux-mako source package in Vivid:
  New
Status in linux-manta source package in Vivid:
  New
Status in linux-mvl-dove source package in Vivid:
  Invalid
Status in linux-ti-omap4 source package in Vivid:
  Invalid
Status in linux source package in Wily:
  New
Status in linux-armadaxp source package in Wily:
  Invalid
Status in linux-ec2 source package in Wily:
  Invalid
Status in linux-flo source package in Wily:
  New
Status in linux-fsl-imx51 source package in Wily:
  Invalid
Status in linux-goldfish source package in Wily:
  New
Status in linux-lts-backport-maverick source package in Wily:
  New
Status in linux-lts-backport-natty source package in Wily:
  New
Status in linux-lts-quantal source package in Wily:
  Invalid
Status in linux-lts-raring source package in Wily:
  Invalid
Status in linux-lts-saucy source package in Wily:
  Invalid
Status in linux-lts-trusty source package in Wily:
  Invalid
Status in linux-lts-utopic source package in Wily:
  Invalid
Status in linux-lts-vivid source package in Wily:
  Invalid
Status in linux-mako source package in Wily:
  New
Status in linux-manta source package in Wily:
  New
Status in linux-mvl-dove source package in Wily:
  Invalid
Status in linux-ti-omap4 source package in Wily:
  Invalid

Bug description:
  The Direct Rendering Manager (DRM) subsystem in the Linux kernel
  through 4.x mishandles requests for Graphics Execution Manager (GEM)
  objects, which allows context-dependent attackers to cause a denial of
  service (memory consumption) via an application that processes
  graphics data, as demonstrated by JavaScript code that creates many
  CANVAS elements for rendering by Chrome or Firefox.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1508323/+subscriptions
References

[Bug 1508323] [NEW] CVE-2013-7445
From: Steve Beattie, 2015-10-21