Messages in this thread | | | Date | Wed, 27 Aug 2014 12:09:41 +0200 | From | Paolo Bonzini <> | Subject | Re: [PATCH v3 part1 0/4] Fix SG_IO ambiguity between READ SUBCHANNEL and UNMAP (and other similar cases) |
| |
Il 27/08/2014 11:34, Luis Henriques ha scritto: > > The SG_IO ioctl's command whitelist is designed for MMC devices (roughly, > > "play/burn CDs without requiring root") but some opcodes overlap across SCSI > > device classes and have different meanings for different classes. > > > > To fix this, use different bitmaps for the various device classes. > > This is CVE-2012-4542. > > Sorry for bringing this old issue again, but I was wondering what > happen to this fix.
Nothing; everybody lost interest in it.
Paolo
| |