Date: Wed, 23 Feb 2011 16:23:53 -0500 (EST) From: Josh Bressers <bressers@...hat.com> To: oss-security@...ts.openwall.com Cc: "Steven M. Christey" <coley@...us.mitre.org> Subject: Re: CVE request: kernel: a collection of world-writable debugfs bugs Thanks for the list. I don't have enough CVE ids for this, I've grouped them by type and version for MITRE to assign IDs. ******** procfs ****** [PATCH 15/20] platform: x86: asus_acpi: world-writable procfs files https://lkml.org/lkml/2011/2/4/73 8040835760adf0ef66876c063d47f79f015fb55d 1da177e4, real commit is older than kernel git epoch. ****** sysfs ******* [PATCH 07/20] video: sn9c102: world-wirtable sysfs files https://lkml.org/lkml/2011/2/4/85 1da177e4, real commit is older than kernel git epoch. [PATCH 14/20] platform: x86: acer-wmi: world-writable sysfs threeg file https://lkml.org/lkml/2011/2/4/79 b80b168f918bba4b847e884492415546b340e19d 745a5d21 v2.6.25-rc1 [PATCH 16/20] platform: x86: tc1100-wmi: world-writable sysfs wireless and jogdial files https://lkml.org/lkml/2011/2/4/78 8a6a142c1286797978e4db266d22875a5f424897 dd8cd779 v2.6.25-rc1 [PATCH 17/20] rtc: rtc-ds1511: world-writable sysfs nvram file https://lkml.org/lkml/2011/2/4/74 8f26795a v2.6.25-rc1 [PATCH 18/20] scsi: aic94xx: world-writable sysfs update_bios file https://lkml.org/lkml/2011/2/4/75 1237c98d v2.6.25-rc1 [PATCH 11/20] misc: ep93xx_pwm: world-writable sysfs files https://lkml.org/lkml/2011/2/4/83 ef12379f v2.6.32-rc1 [PATCH 19/20] scsi: iscsi: world-writable sysfs priv_sess file https://lkml.org/lkml/2011/2/4/76 introduced in fe4f0bde v2.6.36-rc1 [PATCH 04/20] mach-ux500: mbox-db5500: world-writable sysfs fifo file https://lkml.org/lkml/2011/2/4/69 arm arch 38cdfe06 v2.6.37-rc1 [PATCH 05/20] leds: lp5521: world-writable sysfs engine* files https://lkml.org/lkml/2011/2/4/70 500fe141 v2.6.37-rc2 [PATCH 06/20] leds: lp5523: world-writable engine* sysfs files https://lkml.org/lkml/2011/2/4/81 0efba16c v2.6.37-rc2 [PATCH 12/20] net: can: at91_can: world-writable sysfs files https://lkml.org/lkml/2011/2/4/80 fef52b0171dfd7dd9b85c9cc201bd433b42a8ded introduced in 3a5655a5 v2.6.38-rc3 ****** debugfs ******** [PATCH 20/20] fs: ubifs: world-writable debugfs dump_* files https://lkml.org/lkml/2011/2/4/77 552ff317 v2.6.29-rc1 [PATCH 08/20] mfd: ab3100: world-writable debugfs *_priv files https://lkml.org/lkml/2011/2/4/82 14fa5691 v2.6.31-rc1 [PATCH 01/20] mach-omap2: mux: world-writable debugfs files https://lkml.org/lkml/2011/2/4/66 arm arch 4b715efc v2.6.33-rc1 [PATCH 09/20] mfd: ab3500: world-writable debugfs register-* files https://lkml.org/lkml/2011/2/4/84 introduced in 09bcb3f3 v2.6.35-rc1 [PATCH 02/20] mach-omap2: pm: world-writable debugfs timer files https://lkml.org/lkml/2011/2/4/67 arm arch 315e2556 v2.6.37-rc1 [PATCH 10/20] mfd: ab8500: world-writable debugfs register-* files https://lkml.org/lkml/2011/2/4/71 introduced in 5814fc35 v2.6.37-rc1 [PATCH 03/20] mach-omap2: smartreflex: world-writable debugfs voltage files https://lkml.org/lkml/2011/2/4/68 arm arch 984aa6db v2.6.38-rc1 Thanks. -- JB
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.