Candidate: CVE-2016-5344 PublicDate: 2016-08-30 17:59:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5344 https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=1d2297267c24f2c44bd0ecb244ddb8bc880a29b7 https://www.codeaurora.org/integer-overflow-mdss-driver-cve-2016-5344 Description: Multiple integer overflows in the MDSS driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to cause a denial of service or possibly have unspecified other impact via a large size value, related to mdss_compat_utils.c, mdss_fb.c, and mdss_rotator.c. Ubuntu-Description: Notes: jdstrand> android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.10 and earlier preview kernels jdstrand> linux-lts-saucy no longer receives official support jdstrand> linux-lts-quantal no longer receives official support sbeattie> android msm tree only, mdss driver Bugs: Priority: medium Discovered-by: Jianqiang Zhao Assigned-to: CVSS: nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H [9.8 CRITICAL] nvd: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H [9.8 CRITICAL] Patches_linux: upstream_linux: not-affected (Android kernel only) precise_linux: not-affected (Android kernel only) precise/esm_linux: not-affected (Android kernel only) trusty_linux: not-affected (Android kernel only) trusty/esm_linux: not-affected (Android kernel only) vivid/ubuntu-core_linux: not-affected (Android kernel only) vivid/stable-phone-overlay_linux: DNE xenial_linux: not-affected (Android kernel only) esm-infra/xenial_linux: not-affected (Android kernel only) yakkety_linux: not-affected (Android kernel only) zesty_linux: not-affected (Android kernel only) artful_linux: not-affected (Android kernel only) devel_linux: not-affected (Android kernel only) Patches_linux-ti-omap4: upstream_linux-ti-omap4: needs-triage precise_linux-ti-omap4: ignored (reached end-of-life) precise/esm_linux-ti-omap4: DNE (precise was needs-triage) trusty_linux-ti-omap4: DNE trusty/esm_linux-ti-omap4: DNE vivid/ubuntu-core_linux-ti-omap4: DNE vivid/stable-phone-overlay_linux-ti-omap4: DNE xenial_linux-ti-omap4: DNE yakkety_linux-ti-omap4: DNE zesty_linux-ti-omap4: DNE artful_linux-ti-omap4: DNE devel_linux-ti-omap4: DNE Patches_linux-linaro-omap: upstream_linux-linaro-omap: needs-triage precise_linux-linaro-omap: ignored (abandoned) precise/esm_linux-linaro-omap: DNE (precise was ignored [abandoned]) trusty_linux-linaro-omap: DNE trusty/esm_linux-linaro-omap: DNE vivid/ubuntu-core_linux-linaro-omap: DNE vivid/stable-phone-overlay_linux-linaro-omap: DNE xenial_linux-linaro-omap: DNE yakkety_linux-linaro-omap: DNE zesty_linux-linaro-omap: DNE artful_linux-linaro-omap: DNE devel_linux-linaro-omap: DNE Patches_linux-linaro-shared: upstream_linux-linaro-shared: needs-triage precise_linux-linaro-shared: ignored (abandoned) precise/esm_linux-linaro-shared: DNE (precise was ignored [abandoned]) trusty_linux-linaro-shared: DNE trusty/esm_linux-linaro-shared: DNE vivid/ubuntu-core_linux-linaro-shared: DNE vivid/stable-phone-overlay_linux-linaro-shared: DNE xenial_linux-linaro-shared: DNE yakkety_linux-linaro-shared: DNE zesty_linux-linaro-shared: DNE artful_linux-linaro-shared: DNE devel_linux-linaro-shared: DNE Patches_linux-linaro-vexpress: upstream_linux-linaro-vexpress: needs-triage precise_linux-linaro-vexpress: ignored (abandoned) precise/esm_linux-linaro-vexpress: DNE (precise was ignored [abandoned]) trusty_linux-linaro-vexpress: DNE trusty/esm_linux-linaro-vexpress: DNE vivid/ubuntu-core_linux-linaro-vexpress: DNE vivid/stable-phone-overlay_linux-linaro-vexpress: DNE xenial_linux-linaro-vexpress: DNE yakkety_linux-linaro-vexpress: DNE zesty_linux-linaro-vexpress: DNE artful_linux-linaro-vexpress: DNE devel_linux-linaro-vexpress: DNE Patches_linux-qcm-msm: upstream_linux-qcm-msm: needs-triage precise_linux-qcm-msm: ignored (abandoned) precise/esm_linux-qcm-msm: DNE (precise was ignored [abandoned]) trusty_linux-qcm-msm: DNE trusty/esm_linux-qcm-msm: DNE vivid/ubuntu-core_linux-qcm-msm: DNE vivid/stable-phone-overlay_linux-qcm-msm: DNE xenial_linux-qcm-msm: DNE yakkety_linux-qcm-msm: DNE zesty_linux-qcm-msm: DNE artful_linux-qcm-msm: DNE devel_linux-qcm-msm: DNE Tags_linux-armadaxp: not-ue Patches_linux-armadaxp: upstream_linux-armadaxp: needs-triage precise_linux-armadaxp: ignored (reached end-of-life) precise/esm_linux-armadaxp: DNE (precise was needs-triage) trusty_linux-armadaxp: DNE trusty/esm_linux-armadaxp: DNE vivid/ubuntu-core_linux-armadaxp: DNE vivid/stable-phone-overlay_linux-armadaxp: DNE xenial_linux-armadaxp: DNE yakkety_linux-armadaxp: DNE zesty_linux-armadaxp: DNE artful_linux-armadaxp: DNE devel_linux-armadaxp: DNE Tags_linux-lts-quantal: not-ue Patches_linux-lts-quantal: upstream_linux-lts-quantal: needs-triage precise_linux-lts-quantal: ignored (end-of-life) precise/esm_linux-lts-quantal: DNE (precise was ignored [end-of-life]) trusty_linux-lts-quantal: DNE trusty/esm_linux-lts-quantal: DNE vivid/ubuntu-core_linux-lts-quantal: DNE vivid/stable-phone-overlay_linux-lts-quantal: DNE xenial_linux-lts-quantal: DNE yakkety_linux-lts-quantal: DNE zesty_linux-lts-quantal: DNE artful_linux-lts-quantal: DNE devel_linux-lts-quantal: DNE Patches_linux-lts-raring: upstream_linux-lts-raring: needs-triage precise_linux-lts-raring: ignored (end-of-life) precise/esm_linux-lts-raring: DNE (precise was ignored [end-of-life]) trusty_linux-lts-raring: DNE trusty/esm_linux-lts-raring: DNE vivid/ubuntu-core_linux-lts-raring: DNE vivid/stable-phone-overlay_linux-lts-raring: DNE xenial_linux-lts-raring: DNE yakkety_linux-lts-raring: DNE zesty_linux-lts-raring: DNE artful_linux-lts-raring: DNE devel_linux-lts-raring: DNE Tags_linux-lts-saucy: not-ue Patches_linux-lts-saucy: upstream_linux-lts-saucy: needs-triage precise_linux-lts-saucy: ignored (end-of-life) precise/esm_linux-lts-saucy: DNE (precise was ignored [end-of-life]) trusty_linux-lts-saucy: DNE trusty/esm_linux-lts-saucy: DNE vivid/ubuntu-core_linux-lts-saucy: DNE vivid/stable-phone-overlay_linux-lts-saucy: DNE xenial_linux-lts-saucy: DNE yakkety_linux-lts-saucy: DNE zesty_linux-lts-saucy: DNE artful_linux-lts-saucy: DNE devel_linux-lts-saucy: DNE Patches_linux-lts-trusty: upstream_linux-lts-trusty: needs-triage precise_linux-lts-trusty: not-affected (Android kernel only) precise/esm_linux-lts-trusty: not-affected (Android kernel only) trusty_linux-lts-trusty: DNE trusty/esm_linux-lts-trusty: DNE vivid/ubuntu-core_linux-lts-trusty: DNE vivid/stable-phone-overlay_linux-lts-trusty: DNE xenial_linux-lts-trusty: DNE yakkety_linux-lts-trusty: DNE zesty_linux-lts-trusty: DNE artful_linux-lts-trusty: DNE devel_linux-lts-trusty: DNE Patches_linux-goldfish: upstream_linux-goldfish: needs-triage precise_linux-goldfish: DNE precise/esm_linux-goldfish: DNE trusty_linux-goldfish: ignored trusty/esm_linux-goldfish: DNE (trusty was ignored) vivid/ubuntu-core_linux-goldfish: DNE vivid/stable-phone-overlay_linux-goldfish: DNE xenial_linux-goldfish: ignored (abandoned) yakkety_linux-goldfish: ignored (abandoned) zesty_linux-goldfish: ignored (abandoned) artful_linux-goldfish: DNE devel_linux-goldfish: DNE Patches_linux-grouper: upstream_linux-grouper: needs-triage precise_linux-grouper: DNE precise/esm_linux-grouper: DNE trusty_linux-grouper: ignored trusty/esm_linux-grouper: DNE (trusty was ignored) vivid/ubuntu-core_linux-grouper: DNE vivid/stable-phone-overlay_linux-grouper: DNE xenial_linux-grouper: DNE yakkety_linux-grouper: DNE zesty_linux-grouper: DNE artful_linux-grouper: DNE devel_linux-grouper: DNE Patches_linux-maguro: upstream_linux-maguro: needs-triage precise_linux-maguro: DNE precise/esm_linux-maguro: DNE trusty_linux-maguro: ignored trusty/esm_linux-maguro: DNE (trusty was ignored) vivid/ubuntu-core_linux-maguro: DNE vivid/stable-phone-overlay_linux-maguro: DNE xenial_linux-maguro: DNE yakkety_linux-maguro: DNE zesty_linux-maguro: DNE artful_linux-maguro: DNE devel_linux-maguro: DNE Patches_linux-mako: upstream_linux-mako: needs-triage precise_linux-mako: DNE precise/esm_linux-mako: DNE trusty_linux-mako: ignored trusty/esm_linux-mako: DNE (trusty was ignored) vivid/ubuntu-core_linux-mako: DNE vivid/stable-phone-overlay_linux-mako: ignored (abandoned) xenial_linux-mako: ignored (abandoned) yakkety_linux-mako: ignored (abandoned) zesty_linux-mako: DNE artful_linux-mako: DNE devel_linux-mako: DNE Patches_linux-manta: upstream_linux-manta: needs-triage precise_linux-manta: DNE precise/esm_linux-manta: DNE trusty_linux-manta: ignored trusty/esm_linux-manta: DNE (trusty was ignored) vivid/ubuntu-core_linux-manta: DNE vivid/stable-phone-overlay_linux-manta: DNE xenial_linux-manta: DNE yakkety_linux-manta: DNE zesty_linux-manta: DNE artful_linux-manta: DNE devel_linux-manta: DNE Patches_linux-flo: upstream_linux-flo: needs-triage precise_linux-flo: DNE precise/esm_linux-flo: DNE trusty_linux-flo: ignored trusty/esm_linux-flo: DNE (trusty was ignored) vivid/ubuntu-core_linux-flo: DNE vivid/stable-phone-overlay_linux-flo: ignored (abandoned) xenial_linux-flo: ignored (abandoned) yakkety_linux-flo: ignored (abandoned) zesty_linux-flo: DNE artful_linux-flo: DNE devel_linux-flo: DNE Patches_linux-raspi2: upstream_linux-raspi2: needs-triage precise_linux-raspi2: DNE precise/esm_linux-raspi2: DNE trusty_linux-raspi2: DNE trusty/esm_linux-raspi2: DNE vivid/ubuntu-core_linux-raspi2: ignored (was needs-triage now end-of-life) vivid/stable-phone-overlay_linux-raspi2: DNE xenial_linux-raspi2: not-affected (Android only) yakkety_linux-raspi2: ignored (reached end-of-life) zesty_linux-raspi2: not-affected (Android only) artful_linux-raspi2: not-affected (Android only) devel_linux-raspi2: not-affected (Android only) Patches_linux-lts-utopic: upstream_linux-lts-utopic: needs-triage precise_linux-lts-utopic: DNE precise/esm_linux-lts-utopic: DNE trusty_linux-lts-utopic: ignored (out of standard support) trusty/esm_linux-lts-utopic: DNE (trusty was ignored [out of standard support]) vivid/ubuntu-core_linux-lts-utopic: DNE vivid/stable-phone-overlay_linux-lts-utopic: DNE xenial_linux-lts-utopic: DNE yakkety_linux-lts-utopic: DNE zesty_linux-lts-utopic: DNE artful_linux-lts-utopic: DNE devel_linux-lts-utopic: DNE Patches_linux-lts-vivid: upstream_linux-lts-vivid: needs-triage precise_linux-lts-vivid: DNE precise/esm_linux-lts-vivid: DNE trusty_linux-lts-vivid: not-affected (Android kernel only) trusty/esm_linux-lts-vivid: DNE (trusty was not-affected [Android kernel only]) vivid/ubuntu-core_linux-lts-vivid: DNE vivid/stable-phone-overlay_linux-lts-vivid: DNE xenial_linux-lts-vivid: DNE yakkety_linux-lts-vivid: DNE zesty_linux-lts-vivid: DNE artful_linux-lts-vivid: DNE devel_linux-lts-vivid: DNE Patches_linux-lts-wily: upstream_linux-lts-wily: needs-triage precise_linux-lts-wily: DNE precise/esm_linux-lts-wily: DNE trusty_linux-lts-wily: ignored (out of standard support) trusty/esm_linux-lts-wily: DNE (trusty was ignored [out of standard support]) vivid/ubuntu-core_linux-lts-wily: DNE vivid/stable-phone-overlay_linux-lts-wily: DNE xenial_linux-lts-wily: DNE yakkety_linux-lts-wily: DNE zesty_linux-lts-wily: DNE artful_linux-lts-wily: DNE devel_linux-lts-wily: DNE Patches_linux-lts-xenial: upstream_linux-lts-xenial: needs-triage precise_linux-lts-xenial: DNE precise/esm_linux-lts-xenial: DNE trusty_linux-lts-xenial: not-affected (Android kernel only) trusty/esm_linux-lts-xenial: not-affected (Android kernel only) vivid/ubuntu-core_linux-lts-xenial: DNE vivid/stable-phone-overlay_linux-lts-xenial: DNE xenial_linux-lts-xenial: DNE yakkety_linux-lts-xenial: DNE zesty_linux-lts-xenial: DNE artful_linux-lts-xenial: DNE devel_linux-lts-xenial: DNE Patches_linux-snapdragon: upstream_linux-snapdragon: needs-triage precise_linux-snapdragon: DNE precise/esm_linux-snapdragon: DNE trusty_linux-snapdragon: DNE trusty/esm_linux-snapdragon: DNE vivid/ubuntu-core_linux-snapdragon: DNE vivid/stable-phone-overlay_linux-snapdragon: DNE xenial_linux-snapdragon: not-affected (Android only) yakkety_linux-snapdragon: ignored (reached end-of-life) zesty_linux-snapdragon: not-affected (Android only) artful_linux-snapdragon: not-affected (Android only) devel_linux-snapdragon: not-affected (Android only) Patches_linux-aws: upstream_linux-aws: needs-triage precise_linux-aws: DNE precise/esm_linux-aws: DNE trusty_linux-aws: not-affected (Android kernel only) trusty/esm_linux-aws: not-affected (Android kernel only) vivid/ubuntu-core_linux-aws: DNE vivid/stable-phone-overlay_linux-aws: DNE xenial_linux-aws: not-affected esm-infra/xenial_linux-aws: not-affected yakkety_linux-aws: DNE zesty_linux-aws: DNE artful_linux-aws: DNE devel_linux-aws: DNE Patches_linux-hwe-edge: upstream_linux-hwe-edge: needs-triage precise_linux-hwe-edge: DNE precise/esm_linux-hwe-edge: DNE trusty_linux-hwe-edge: DNE trusty/esm_linux-hwe-edge: DNE vivid/ubuntu-core_linux-hwe-edge: DNE vivid/stable-phone-overlay_linux-hwe-edge: DNE xenial_linux-hwe-edge: not-affected esm-infra/xenial_linux-hwe-edge: not-affected yakkety_linux-hwe-edge: DNE zesty_linux-hwe-edge: DNE artful_linux-hwe-edge: DNE devel_linux-hwe-edge: DNE Patches_linux-hwe: upstream_linux-hwe: needs-triage precise_linux-hwe: DNE precise/esm_linux-hwe: DNE trusty_linux-hwe: DNE trusty/esm_linux-hwe: DNE vivid/ubuntu-core_linux-hwe: DNE vivid/stable-phone-overlay_linux-hwe: DNE xenial_linux-hwe: not-affected esm-infra/xenial_linux-hwe: not-affected yakkety_linux-hwe: DNE zesty_linux-hwe: DNE artful_linux-hwe: DNE devel_linux-hwe: DNE Patches_linux-gke: upstream_linux-gke: needs-triage precise_linux-gke: DNE precise/esm_linux-gke: DNE trusty_linux-gke: DNE trusty/esm_linux-gke: DNE vivid/ubuntu-core_linux-gke: DNE vivid/stable-phone-overlay_linux-gke: DNE xenial_linux-gke: not-affected yakkety_linux-gke: DNE zesty_linux-gke: DNE artful_linux-gke: DNE devel_linux-gke: DNE Patches_linux-azure: upstream_linux-azure: needs-triage precise/esm_linux-azure: DNE trusty_linux-azure: not-affected (4.15.0-1023.24~14.04.1) trusty/esm_linux-azure: not-affected (4.15.0-1023.24~14.04.1) vivid/ubuntu-core_linux-azure: DNE vivid/stable-phone-overlay_linux-azure: DNE xenial_linux-azure: not-affected esm-infra/xenial_linux-azure: not-affected yakkety_linux-azure: DNE zesty_linux-azure: DNE artful_linux-azure: DNE devel_linux-azure: DNE Patches_linux-gcp: upstream_linux-gcp: needs-triage precise/esm_linux-gcp: DNE trusty_linux-gcp: DNE trusty/esm_linux-gcp: DNE vivid/ubuntu-core_linux-gcp: DNE xenial_linux-gcp: not-affected esm-infra/xenial_linux-gcp: not-affected yakkety_linux-gcp: DNE zesty_linux-gcp: DNE artful_linux-gcp: DNE devel_linux-gcp: DNE Patches_linux-kvm: upstream_linux-kvm: needs-triage precise/esm_linux-kvm: DNE trusty_linux-kvm: DNE trusty/esm_linux-kvm: DNE vivid/ubuntu-core_linux-kvm: DNE xenial_linux-kvm: not-affected esm-infra/xenial_linux-kvm: not-affected zesty_linux-kvm: DNE artful_linux-kvm: DNE devel_linux-kvm: DNE Patches_linux-euclid: upstream_linux-euclid: needs-triage precise/esm_linux-euclid: DNE trusty_linux-euclid: DNE trusty/esm_linux-euclid: DNE vivid/ubuntu-core_linux-euclid: DNE xenial_linux-euclid: not-affected zesty_linux-euclid: DNE artful_linux-euclid: DNE devel_linux-euclid: DNE Patches_linux-oem: upstream_linux-oem: needs-triage precise/esm_linux-oem: DNE trusty_linux-oem: DNE trusty/esm_linux-oem: DNE xenial_linux-oem: not-affected zesty_linux-oem: DNE artful_linux-oem: DNE devel_linux-oem: DNE