[DATA] CVE-2021-39800 and CVE-2021-39801 version information

[DerDakon]

Change Type Requested Update

CVE id number CVE-2021-39801

References https://source.android.com/security/bulletin/2022-04-01

Additional context The Android bulletin links to 3 commits, which I don't know which one actually fixed the issue:

• https://github.com/gregkh/linux/commit/a8200613c8c9f
• https://github.com/gregkh/linux/commit/504e1d6ee65d5
• https://github.com/gregkh/linux/commit/c47385c73fced

All went into 4.9.299. I don't see these commits in any other stable tree.

Android ION has been removed from the tree in https://github.com/torvalds/linux/commit/3db1a3fa98808aa90f95ec3e0fa2fc7abf28f5c9 (i.e. 5.11-rc1).

I'm not sure when this was actually introduced, but a lower bound is v3.14-rc1 as this is the first commit the ION driver appears in, see https://github.com/torvalds/linux/commit/c30707be128e952ca2ba77417cb5509e254a4aac.

[DerDakon]

This also applies to CVE-2021-39800, which lists the same commits.