Back to bug 1389258

Who When What Removed Added
Adam Mariš 2016-10-27 11:20:59 UTC Blocks 1389281
Adam Mariš 2016-10-27 11:23:48 UTC Depends On 1389285
Slawomir Czarko 2016-10-28 08:40:56 UTC CC slawomir
Salvatore Bonaccorso 2016-10-29 19:09:14 UTC CC carnil
Wade Mealing 2016-11-14 03:29:39 UTC Whiteboard impact=moderate,public=20161012,reported=20161027,source=oss-security,cvss2=3.3/AV:L/AC:M/Au:N/C:N/I:P/A:P,cvss3=5.3/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H,cwe=CWE-391,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,rhel-7/kernel=new,rhel-7/kernel-rt=new,mrg-2/realtime-kernel=notaffected,rhelsa-7/arm-kernel=new,fedora-all/kernel=affected impact=moderate,public=20161012,reported=20161027,source=oss-security,cvss2=7.2/AV:L/AC:L/Au:N/C:C/I:C/A:C,cvss3=5.3/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H,cwe=CWE-391,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,rhel-7/kernel=affected,rhel-7/kernel-rt=affected,mrg-2/realtime-kernel=affected,rhelsa-7/arm-kernel=affected,fedora-all/kernel=affected
Wade Mealing 2016-11-14 04:46:07 UTC CC wmealing
Wade Mealing 2016-11-14 05:08:52 UTC Whiteboard impact=moderate,public=20161012,reported=20161027,source=oss-security,cvss2=7.2/AV:L/AC:L/Au:N/C:C/I:C/A:C,cvss3=5.3/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H,cwe=CWE-391,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,rhel-7/kernel=affected,rhel-7/kernel-rt=affected,mrg-2/realtime-kernel=affected,rhelsa-7/arm-kernel=affected,fedora-all/kernel=affected impact=important,public=20161012,reported=20161027,source=oss-security,cvss2=7.2/AV:L/AC:L/Au:N/C:C/I:C/A:C,cvss3=5.3/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H,cwe=CWE-391,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,rhel-7/kernel=affected,rhel-7/kernel-rt=affected,mrg-2/realtime-kernel=affected,rhelsa-7/arm-kernel=affected,fedora-all/kernel=affected
Wade Mealing 2016-11-14 05:20:53 UTC Doc Text A flaw was discovered in the Linux kernels implementation of VFIO. An attacker issuing an ioctl can create a situation where memory is corrupted and modify memory outside of the expected area. This may ovewrite kernel memory and subvert kernel execution.
Wade Mealing 2016-11-14 05:30:16 UTC Depends On 1394627
Wade Mealing 2016-11-14 05:30:26 UTC Depends On 1394628
Wade Mealing 2016-11-14 05:30:40 UTC Depends On 1394629
Wade Mealing 2016-11-14 05:30:47 UTC Depends On 1394630
Wade Mealing 2016-11-14 05:30:56 UTC Depends On 1394631
Wade Mealing 2016-11-14 05:31:06 UTC Depends On 1394632
Eric Christensen 2016-11-14 13:05:19 UTC Doc Text A flaw was discovered in the Linux kernels implementation of VFIO. An attacker issuing an ioctl can create a situation where memory is corrupted and modify memory outside of the expected area. This may ovewrite kernel memory and subvert kernel execution. A flaw was discovered in the Linux kernel's implementation of VFIO. An attacker issuing an ioctl can create a situation where memory is corrupted and modify memory outside of the expected area. This may overwrite kernel memory and subvert kernel execution.
Andrej Nemec 2016-11-15 08:09:23 UTC Priority medium high
Severity medium high
Petr Matousek 2017-01-27 11:52:43 UTC CC pmatouse
Whiteboard impact=important,public=20161012,reported=20161027,source=oss-security,cvss2=7.2/AV:L/AC:L/Au:N/C:C/I:C/A:C,cvss3=5.3/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H,cwe=CWE-391,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,rhel-7/kernel=affected,rhel-7/kernel-rt=affected,mrg-2/realtime-kernel=affected,rhelsa-7/arm-kernel=affected,fedora-all/kernel=affected impact=important,public=20161012,reported=20161027,source=oss-security,cvss2=7.2/AV:L/AC:L/Au:N/C:C/I:C/A:C,cvss3=5.3/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H,cwe=CWE-391,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,rhel-7/kernel=affected,rhel-7/kernel-rt=affected,mrg-2/realtime-kernel=notaffected,rhelsa-7/arm-kernel=affected,fedora-all/kernel=affected
Eric Christensen 2017-02-23 15:18:38 UTC Doc Text A flaw was discovered in the Linux kernel's implementation of VFIO. An attacker issuing an ioctl can create a situation where memory is corrupted and modify memory outside of the expected area. This may overwrite kernel memory and subvert kernel execution. A flaw was discovered in the Linux kernel's implementation of VFIO. An attacker issuing an ioctl can create a situation where memory is corrupted and modify memory outside of the expected area. This may overwrite kernel memory and subvert kernel execution.
PnT Account Manager 2018-02-07 23:19:29 UTC CC agordeev
PnT Account Manager 2018-07-19 06:21:08 UTC CC mguzik
PnT Account Manager 2018-08-28 22:08:59 UTC CC lwang
Eric Sammons 2019-02-08 14:59:09 UTC CC esammons
Product Security DevOps Team 2019-06-08 03:01:17 UTC Status NEW CLOSED
Resolution --- ERRATA
Last Closed 2019-06-08 03:01:17 UTC
Product Security DevOps Team 2019-09-29 13:58:49 UTC Whiteboard impact=important,public=20161012,reported=20161027,source=oss-security,cvss2=7.2/AV:L/AC:L/Au:N/C:C/I:C/A:C,cvss3=5.3/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H,cwe=CWE-391,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,rhel-7/kernel=affected,rhel-7/kernel-rt=affected,mrg-2/realtime-kernel=notaffected,rhelsa-7/arm-kernel=affected,fedora-all/kernel=affected

Back to bug 1389258