backport fix for CVE-2017-18509 and CVE-2017-18551

OE4T / linux-tegra-4.9

NVIDIA downstream Linux kernel source Jetson platforms in single-repo form, derived from the L4T R32.x series BSP

Other

57 stars 78 forks source link

backport fix for CVE-2017-18509 and CVE-2017-18551 #2

Closed danielwangksu closed 4 years ago

danielwangksu commented 4 years ago

I'm sorting CVEs chronologically. It seems most CVEs from 2017 are patched except the following:

CVE-2017-16648 (linux-4.9.y have not patched)
CVE-2017-9986 (linux-4.9.y have not patched)
CVE-2017-18509
CVE-2017-18551

Those two CVEs are nothing critical, however, it is fairly easy to port. So I'm using them as a test. If you think this approach is OK I will continue working on 2018's CVEs. Love you hear your feedback.

madisongh commented 4 years ago

LGTM. Thanks!