Candidate: CVE-2015-8950 PublicDate: 2016-10-10 10:59:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8950 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6829e274a623187c24f7cfc0e3d35f25d087fcc5 http://source.android.com/security/bulletin/2016-10-01.html http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.3 https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=6e2c437a2d0a85d90d3db85a7471f99764f7bbf8 Description: arch/arm64/mm/dma-mapping.c in the Linux kernel before 4.0.3, as used in the ION subsystem in Android and other products, does not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory by triggering a dma_mmap call. Ubuntu-Description: Notes: jdstrand> android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.10 and earlier preview kernels jdstrand> linux-lts-saucy no longer receives official support jdstrand> linux-lts-quantal no longer receives official support tyhicks> specific to arm64 kernels Bugs: Priority: low Discovered-by: Assigned-to: CVSS: nvd: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N [5.5 MEDIUM] Patches_linux: break-fix: d4932f9e81ae7a7bf3c3967e48373909b9c98ee5 6829e274a623187c24f7cfc0e3d35f25d087fcc5 upstream_linux: released (4.1~rc2) precise_linux: ignored (reached end-of-life) precise/esm_linux: not-affected trusty_linux: not-affected trusty/esm_linux: not-affected vivid/ubuntu-core_linux: released (3.19.0-22.22) vivid/stable-phone-overlay_linux: DNE xenial_linux: not-affected (4.2.0-16.19) esm-infra/xenial_linux: not-affected (4.2.0-16.19) yakkety_linux: not-affected (4.4.0-21.37) zesty_linux: not-affected (4.8.0-22.24) devel_linux: not-affected (4.10.0-19.21) Patches_linux-ti-omap4: upstream_linux-ti-omap4: released (4.1~rc2) precise_linux-ti-omap4: ignored (reached end-of-life) precise/esm_linux-ti-omap4: DNE (precise was needed) trusty_linux-ti-omap4: DNE trusty/esm_linux-ti-omap4: DNE vivid/ubuntu-core_linux-ti-omap4: DNE vivid/stable-phone-overlay_linux-ti-omap4: DNE xenial_linux-ti-omap4: DNE yakkety_linux-ti-omap4: DNE zesty_linux-ti-omap4: DNE devel_linux-ti-omap4: DNE Patches_linux-linaro-omap: upstream_linux-linaro-omap: released (4.1~rc2) precise_linux-linaro-omap: ignored (abandoned) precise/esm_linux-linaro-omap: DNE (precise was ignored [abandoned]) trusty_linux-linaro-omap: DNE trusty/esm_linux-linaro-omap: DNE vivid/ubuntu-core_linux-linaro-omap: DNE vivid/stable-phone-overlay_linux-linaro-omap: DNE xenial_linux-linaro-omap: DNE yakkety_linux-linaro-omap: DNE zesty_linux-linaro-omap: DNE devel_linux-linaro-omap: DNE Patches_linux-linaro-shared: upstream_linux-linaro-shared: released (4.1~rc2) precise_linux-linaro-shared: ignored (abandoned) precise/esm_linux-linaro-shared: DNE (precise was ignored [abandoned]) trusty_linux-linaro-shared: DNE trusty/esm_linux-linaro-shared: DNE vivid/ubuntu-core_linux-linaro-shared: DNE vivid/stable-phone-overlay_linux-linaro-shared: DNE xenial_linux-linaro-shared: DNE yakkety_linux-linaro-shared: DNE zesty_linux-linaro-shared: DNE devel_linux-linaro-shared: DNE Patches_linux-linaro-vexpress: upstream_linux-linaro-vexpress: released (4.1~rc2) precise_linux-linaro-vexpress: ignored (abandoned) precise/esm_linux-linaro-vexpress: DNE (precise was ignored [abandoned]) trusty_linux-linaro-vexpress: DNE trusty/esm_linux-linaro-vexpress: DNE vivid/ubuntu-core_linux-linaro-vexpress: DNE vivid/stable-phone-overlay_linux-linaro-vexpress: DNE xenial_linux-linaro-vexpress: DNE yakkety_linux-linaro-vexpress: DNE zesty_linux-linaro-vexpress: DNE devel_linux-linaro-vexpress: DNE Patches_linux-qcm-msm: upstream_linux-qcm-msm: released (4.1~rc2) precise_linux-qcm-msm: ignored (abandoned) precise/esm_linux-qcm-msm: DNE (precise was ignored [abandoned]) trusty_linux-qcm-msm: DNE trusty/esm_linux-qcm-msm: DNE vivid/ubuntu-core_linux-qcm-msm: DNE vivid/stable-phone-overlay_linux-qcm-msm: DNE xenial_linux-qcm-msm: DNE yakkety_linux-qcm-msm: DNE zesty_linux-qcm-msm: DNE devel_linux-qcm-msm: DNE Tags_linux-armadaxp: not-ue Patches_linux-armadaxp: upstream_linux-armadaxp: released (4.1~rc2) precise_linux-armadaxp: ignored (reached end-of-life) precise/esm_linux-armadaxp: DNE (precise was needed) trusty_linux-armadaxp: DNE trusty/esm_linux-armadaxp: DNE vivid/ubuntu-core_linux-armadaxp: DNE vivid/stable-phone-overlay_linux-armadaxp: DNE xenial_linux-armadaxp: DNE yakkety_linux-armadaxp: DNE zesty_linux-armadaxp: DNE devel_linux-armadaxp: DNE Tags_linux-lts-quantal: not-ue Patches_linux-lts-quantal: upstream_linux-lts-quantal: released (4.1~rc2) precise_linux-lts-quantal: ignored (end-of-life) precise/esm_linux-lts-quantal: DNE (precise was ignored [end-of-life]) trusty_linux-lts-quantal: DNE trusty/esm_linux-lts-quantal: DNE vivid/ubuntu-core_linux-lts-quantal: DNE vivid/stable-phone-overlay_linux-lts-quantal: DNE xenial_linux-lts-quantal: DNE yakkety_linux-lts-quantal: DNE zesty_linux-lts-quantal: DNE devel_linux-lts-quantal: DNE Patches_linux-lts-raring: upstream_linux-lts-raring: released (4.1~rc2) precise_linux-lts-raring: ignored (end-of-life) precise/esm_linux-lts-raring: DNE (precise was ignored [end-of-life]) trusty_linux-lts-raring: DNE trusty/esm_linux-lts-raring: DNE vivid/ubuntu-core_linux-lts-raring: DNE vivid/stable-phone-overlay_linux-lts-raring: DNE xenial_linux-lts-raring: DNE yakkety_linux-lts-raring: DNE zesty_linux-lts-raring: DNE devel_linux-lts-raring: DNE Tags_linux-lts-saucy: not-ue Patches_linux-lts-saucy: upstream_linux-lts-saucy: released (4.1~rc2) precise_linux-lts-saucy: ignored (end-of-life) precise/esm_linux-lts-saucy: DNE (precise was ignored [end-of-life]) trusty_linux-lts-saucy: DNE trusty/esm_linux-lts-saucy: DNE vivid/ubuntu-core_linux-lts-saucy: DNE vivid/stable-phone-overlay_linux-lts-saucy: DNE xenial_linux-lts-saucy: DNE yakkety_linux-lts-saucy: DNE zesty_linux-lts-saucy: DNE devel_linux-lts-saucy: DNE Patches_linux-lts-trusty: upstream_linux-lts-trusty: released (4.1~rc2) precise_linux-lts-trusty: ignored (reached end-of-life) precise/esm_linux-lts-trusty: not-affected trusty_linux-lts-trusty: DNE trusty/esm_linux-lts-trusty: DNE vivid/ubuntu-core_linux-lts-trusty: DNE vivid/stable-phone-overlay_linux-lts-trusty: DNE xenial_linux-lts-trusty: DNE yakkety_linux-lts-trusty: DNE zesty_linux-lts-trusty: DNE devel_linux-lts-trusty: DNE Patches_linux-goldfish: upstream_linux-goldfish: released (4.1~rc2) precise_linux-goldfish: DNE precise/esm_linux-goldfish: DNE trusty_linux-goldfish: ignored trusty/esm_linux-goldfish: DNE (trusty was ignored) vivid/ubuntu-core_linux-goldfish: DNE vivid/stable-phone-overlay_linux-goldfish: DNE xenial_linux-goldfish: ignored (abandoned) yakkety_linux-goldfish: ignored (abandoned) zesty_linux-goldfish: ignored (abandoned) devel_linux-goldfish: DNE Patches_linux-grouper: upstream_linux-grouper: released (4.1~rc2) precise_linux-grouper: DNE precise/esm_linux-grouper: DNE trusty_linux-grouper: ignored trusty/esm_linux-grouper: DNE (trusty was ignored) vivid/ubuntu-core_linux-grouper: DNE vivid/stable-phone-overlay_linux-grouper: DNE xenial_linux-grouper: DNE yakkety_linux-grouper: DNE zesty_linux-grouper: DNE devel_linux-grouper: DNE Patches_linux-maguro: upstream_linux-maguro: released (4.1~rc2) precise_linux-maguro: DNE precise/esm_linux-maguro: DNE trusty_linux-maguro: ignored trusty/esm_linux-maguro: DNE (trusty was ignored) vivid/ubuntu-core_linux-maguro: DNE vivid/stable-phone-overlay_linux-maguro: DNE xenial_linux-maguro: DNE yakkety_linux-maguro: DNE zesty_linux-maguro: DNE devel_linux-maguro: DNE Patches_linux-mako: upstream_linux-mako: released (4.1~rc2) precise_linux-mako: DNE precise/esm_linux-mako: DNE trusty_linux-mako: ignored trusty/esm_linux-mako: DNE (trusty was ignored) vivid/ubuntu-core_linux-mako: DNE vivid/stable-phone-overlay_linux-mako: ignored (abandoned) xenial_linux-mako: ignored (abandoned) yakkety_linux-mako: ignored (abandoned) zesty_linux-mako: DNE devel_linux-mako: DNE Patches_linux-manta: upstream_linux-manta: released (4.1~rc2) precise_linux-manta: DNE precise/esm_linux-manta: DNE trusty_linux-manta: ignored trusty/esm_linux-manta: DNE (trusty was ignored) vivid/ubuntu-core_linux-manta: DNE vivid/stable-phone-overlay_linux-manta: DNE xenial_linux-manta: DNE yakkety_linux-manta: DNE zesty_linux-manta: DNE devel_linux-manta: DNE Patches_linux-flo: upstream_linux-flo: released (4.1~rc2) precise_linux-flo: DNE precise/esm_linux-flo: DNE trusty_linux-flo: ignored trusty/esm_linux-flo: DNE (trusty was ignored) vivid/ubuntu-core_linux-flo: DNE vivid/stable-phone-overlay_linux-flo: ignored (abandoned) xenial_linux-flo: ignored (abandoned) yakkety_linux-flo: ignored (abandoned) zesty_linux-flo: DNE devel_linux-flo: DNE Patches_linux-raspi2: upstream_linux-raspi2: released (4.1~rc2) precise_linux-raspi2: DNE precise/esm_linux-raspi2: DNE trusty_linux-raspi2: DNE trusty/esm_linux-raspi2: DNE vivid/ubuntu-core_linux-raspi2: released (4.2.0-1014.21) vivid/stable-phone-overlay_linux-raspi2: DNE xenial_linux-raspi2: not-affected (4.2.0-1013.19) yakkety_linux-raspi2: not-affected (4.4.0-1009.10) zesty_linux-raspi2: not-affected (4.8.0-1013.15) devel_linux-raspi2: not-affected (4.10.0-1004.6) Patches_linux-lts-utopic: upstream_linux-lts-utopic: released (4.1~rc2) precise_linux-lts-utopic: DNE precise/esm_linux-lts-utopic: DNE trusty_linux-lts-utopic: ignored (out of standard support) trusty/esm_linux-lts-utopic: DNE (trusty was ignored [out of standard support]) vivid/ubuntu-core_linux-lts-utopic: DNE vivid/stable-phone-overlay_linux-lts-utopic: DNE xenial_linux-lts-utopic: DNE yakkety_linux-lts-utopic: DNE zesty_linux-lts-utopic: DNE devel_linux-lts-utopic: DNE Patches_linux-lts-vivid: upstream_linux-lts-vivid: released (4.1~rc2) precise_linux-lts-vivid: DNE precise/esm_linux-lts-vivid: DNE trusty_linux-lts-vivid: released (3.19.0-22.22~14.04.1) trusty/esm_linux-lts-vivid: DNE (trusty was released [3.19.0-22.22~14.04.1]) vivid/ubuntu-core_linux-lts-vivid: DNE vivid/stable-phone-overlay_linux-lts-vivid: DNE xenial_linux-lts-vivid: DNE yakkety_linux-lts-vivid: DNE zesty_linux-lts-vivid: DNE devel_linux-lts-vivid: DNE Patches_linux-lts-wily: upstream_linux-lts-wily: released (4.1~rc2) precise_linux-lts-wily: DNE precise/esm_linux-lts-wily: DNE trusty_linux-lts-wily: ignored (out of standard support) trusty/esm_linux-lts-wily: DNE (trusty was ignored [out of standard support]) vivid/ubuntu-core_linux-lts-wily: DNE vivid/stable-phone-overlay_linux-lts-wily: DNE xenial_linux-lts-wily: DNE yakkety_linux-lts-wily: DNE zesty_linux-lts-wily: DNE devel_linux-lts-wily: DNE Patches_linux-lts-xenial: upstream_linux-lts-xenial: released (4.1~rc2) precise_linux-lts-xenial: DNE precise/esm_linux-lts-xenial: DNE trusty_linux-lts-xenial: not-affected (4.4.0-13.29~14.04.1) trusty/esm_linux-lts-xenial: not-affected (4.4.0-13.29~14.04.1) vivid/ubuntu-core_linux-lts-xenial: DNE vivid/stable-phone-overlay_linux-lts-xenial: DNE xenial_linux-lts-xenial: DNE yakkety_linux-lts-xenial: DNE zesty_linux-lts-xenial: DNE devel_linux-lts-xenial: DNE Patches_linux-snapdragon: upstream_linux-snapdragon: released (4.1~rc2) precise_linux-snapdragon: DNE precise/esm_linux-snapdragon: DNE trusty_linux-snapdragon: DNE trusty/esm_linux-snapdragon: DNE vivid/ubuntu-core_linux-snapdragon: DNE vivid/stable-phone-overlay_linux-snapdragon: DNE xenial_linux-snapdragon: not-affected (4.4.0-1012.12) yakkety_linux-snapdragon: not-affected (4.4.0-1012.12) zesty_linux-snapdragon: not-affected (4.4.0-1029.32) devel_linux-snapdragon: not-affected (4.4.0-1050.54) Patches_linux-aws: upstream_linux-aws: released (4.1~rc2) precise_linux-aws: DNE precise/esm_linux-aws: DNE trusty_linux-aws: not-affected (4.4.0-1002.2) trusty/esm_linux-aws: not-affected (4.4.0-1002.2) vivid/ubuntu-core_linux-aws: DNE vivid/stable-phone-overlay_linux-aws: DNE xenial_linux-aws: not-affected (4.4.0-1001.10) esm-infra/xenial_linux-aws: not-affected (4.4.0-1001.10) yakkety_linux-aws: DNE zesty_linux-aws: DNE devel_linux-aws: DNE Patches_linux-hwe-edge: upstream_linux-hwe-edge: released (4.1~rc2) precise_linux-hwe-edge: DNE precise/esm_linux-hwe-edge: DNE trusty_linux-hwe-edge: DNE trusty/esm_linux-hwe-edge: DNE vivid/ubuntu-core_linux-hwe-edge: DNE vivid/stable-phone-overlay_linux-hwe-edge: DNE xenial_linux-hwe-edge: not-affected (4.8.0-36.36~16.04.1) esm-infra/xenial_linux-hwe-edge: not-affected (4.8.0-36.36~16.04.1) yakkety_linux-hwe-edge: DNE zesty_linux-hwe-edge: DNE devel_linux-hwe-edge: DNE Patches_linux-hwe: upstream_linux-hwe: released (4.1~rc2) precise_linux-hwe: DNE precise/esm_linux-hwe: DNE trusty_linux-hwe: DNE trusty/esm_linux-hwe: DNE vivid/ubuntu-core_linux-hwe: DNE vivid/stable-phone-overlay_linux-hwe: DNE xenial_linux-hwe: not-affected (4.8.0-36.36~16.04.1) esm-infra/xenial_linux-hwe: not-affected (4.8.0-36.36~16.04.1) yakkety_linux-hwe: DNE zesty_linux-hwe: DNE devel_linux-hwe: DNE Patches_linux-gke: upstream_linux-gke: released (4.1~rc2) precise_linux-gke: DNE precise/esm_linux-gke: DNE trusty_linux-gke: DNE trusty/esm_linux-gke: DNE vivid/ubuntu-core_linux-gke: DNE vivid/stable-phone-overlay_linux-gke: DNE xenial_linux-gke: not-affected (4.4.0-1003.3) yakkety_linux-gke: DNE zesty_linux-gke: DNE devel_linux-gke: DNE