Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.kernel > #1729064 > unrolled thread
| Started by | grygorii tertychnyi <gtertych@cisco.com> |
|---|---|
| First post | 2017-09-08 18:20 +0200 |
| Last post | 2017-09-08 21:20 +0200 |
| Articles | 5 — 4 participants |
Back to article view | Back to linux.kernel
[PATCH] ALSA: msnd: Optimize / harden DSP and MIDI loops grygorii tertychnyi <gtertych@cisco.com> - 2017-09-08 18:20 +0200
Re: [PATCH] ALSA: msnd: Optimize / harden DSP and MIDI loops Greg KH <gregkh@linuxfoundation.org> - 2017-09-08 18:30 +0200
Re: [PATCH] ALSA: msnd: Optimize / harden DSP and MIDI loops Takashi Iwai <tiwai@suse.de> - 2017-09-08 19:00 +0200
Re: [PATCH] ALSA: msnd: Optimize / harden DSP and MIDI loops "Grygorii Tertychnyi (gtertych)" <gtertych@cisco.com> - 2017-09-08 20:00 +0200
Re: [PATCH] ALSA: msnd: Optimize / harden DSP and MIDI loops Greg KH <gregkh@linuxfoundation.org> - 2017-09-08 21:20 +0200
| From | grygorii tertychnyi <gtertych@cisco.com> |
|---|---|
| Date | 2017-09-08 18:20 +0200 |
| Subject | [PATCH] ALSA: msnd: Optimize / harden DSP and MIDI loops |
| Message-ID | <unuaC-VM-31@gated-at.bofh.it> |
Hi Greg, Could you please apply it for 4.4-stable. This fixes https://nvd.nist.gov/vuln/detail/CVE-2017-9985 Takashi Iwai (1): ALSA: msnd: Optimize / harden DSP and MIDI loops sound/isa/msnd/msnd_midi.c | 30 +++++++++++++++--------------- sound/isa/msnd/msnd_pinnacle.c | 23 ++++++++++++----------- 2 files changed, 27 insertions(+), 26 deletions(-) -- 2.10.3.dirty
[toc] | [next] | [standalone]
| From | Greg KH <gregkh@linuxfoundation.org> |
|---|---|
| Date | 2017-09-08 18:30 +0200 |
| Message-ID | <unuki-YK-7@gated-at.bofh.it> |
| In reply to | #1729064 |
On Fri, Sep 08, 2017 at 09:06:25AM -0700, grygorii tertychnyi wrote: > Hi Greg, > > Could you please apply it for 4.4-stable. > This fixes https://nvd.nist.gov/vuln/detail/CVE-2017-9985 Why just 4.4? What about 4.12, 4.9, and any others? thanks, greg k-h
[toc] | [prev] | [next] | [standalone]
| From | Takashi Iwai <tiwai@suse.de> |
|---|---|
| Date | 2017-09-08 19:00 +0200 |
| Message-ID | <unuNk-1b6-17@gated-at.bofh.it> |
| In reply to | #1729064 |
On Fri, 08 Sep 2017 18:06:25 +0200, grygorii tertychnyi wrote: > > Hi Greg, > > Could you please apply it for 4.4-stable. > This fixes https://nvd.nist.gov/vuln/detail/CVE-2017-9985 This vulnerability is just non-issue. You can't get it working practically; it requires a modified hardware of the decade old ISA sound card, and yet the system has to load / set up the module beforehand. We should withdraw it from CVE, IMO. thanks, Takashi > > Takashi Iwai (1): > ALSA: msnd: Optimize / harden DSP and MIDI loops > > sound/isa/msnd/msnd_midi.c | 30 +++++++++++++++--------------- > sound/isa/msnd/msnd_pinnacle.c | 23 ++++++++++++----------- > 2 files changed, 27 insertions(+), 26 deletions(-) > > -- > 2.10.3.dirty >
[toc] | [prev] | [next] | [standalone]
| From | "Grygorii Tertychnyi (gtertych)" <gtertych@cisco.com> |
|---|---|
| Date | 2017-09-08 20:00 +0200 |
| Message-ID | <unvJo-1M9-19@gated-at.bofh.it> |
| In reply to | #1729089 |
>> Hi Greg, >> >> Could you please apply it for 4.4-stable. >> This fixes https://nvd.nist.gov/vuln/detail/CVE-2017-9985 > > This vulnerability is just non-issue. You can't get it working > practically; it requires a modified hardware of the decade old ISA > sound card, and yet the system has to load / set up the module > beforehand. We should withdraw it from CVE, IMO. I think it is worth having it in 4.4, 4.9 and 4.12 also. >> >> Takashi Iwai (1): >> ALSA: msnd: Optimize / harden DSP and MIDI loops >> >> sound/isa/msnd/msnd_midi.c | 30 +++++++++++++++--------------- >> sound/isa/msnd/msnd_pinnacle.c | 23 ++++++++++++----------- >> 2 files changed, 27 insertions(+), 26 deletions(-) >>
[toc] | [prev] | [next] | [standalone]
| From | Greg KH <gregkh@linuxfoundation.org> |
|---|---|
| Date | 2017-09-08 21:20 +0200 |
| Message-ID | <unwYN-2QU-13@gated-at.bofh.it> |
| In reply to | #1729089 |
On Fri, Sep 08, 2017 at 06:57:57PM +0200, Takashi Iwai wrote: > On Fri, 08 Sep 2017 18:06:25 +0200, > grygorii tertychnyi wrote: > > > > Hi Greg, > > > > Could you please apply it for 4.4-stable. > > This fixes https://nvd.nist.gov/vuln/detail/CVE-2017-9985 > > This vulnerability is just non-issue. You can't get it working > practically; it requires a modified hardware of the decade old ISA > sound card, and yet the system has to load / set up the module > beforehand. We should withdraw it from CVE, IMO. Hah, good luck trying to get a CVE withdrawn, people seem to love the foolish things...
[toc] | [prev] | [standalone]
Back to top | Article view | linux.kernel
csiph-web