Date: Tue, 22 Mar 2016 19:00:04 -0400 From: Daniel Micay <danielmicay@...il.com> To: oss-security@...ts.openwall.com Subject: Re: CVE-2015-1805 Linux kernel: pipe: iovec overrun leading to memory corruption > Apparently, this vulnerability is being used to root older Android > devices, and as a result it has just been fixed for older Android: Most new Android devices are also vulnerable to it. The Nexus 6, 9, 5X and 6P use 3.10, while older devices like the Nexus 5 use 3.4. There isn't a Nexus device with 3.18, only the Pixel C and very few third party devices. Google's kernels aren't based on the upstream stable branches and they missed this fix. They've surely missed a lot more too. Download attachment "signature.asc" of type "application/pgp-signature" (820 bytes)
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.