Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 22 Mar 2016 19:00:04 -0400
From: Daniel Micay <>
Subject: Re: CVE-2015-1805 Linux kernel: pipe: iovec overrun
 leading to memory corruption

> Apparently, this vulnerability is being used to root older Android
> devices, and as a result it has just been fixed for older Android:

Most new Android devices are also vulnerable to it. The Nexus 6, 9, 5X
and 6P use 3.10, while older devices like the Nexus 5 use 3.4. There
isn't a Nexus device with 3.18, only the Pixel C and very few third
party devices.

Google's kernels aren't based on the upstream stable branches and they
missed this fix. They've surely missed a lot more too.
Download attachment "signature.asc" of type "application/pgp-signature" (820 bytes)

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.