[oss-security] CVE request: kernel: drm/radeon/kms: check AA resolve registers on r300

Check values passed in to AARESOLVE_OFFSET on r300. It can be used to
write arbitrary data to VRAM, GTT, etc. This is specific to a range of
GPUs only.

drm/radeon/kms: check AA resolve registers on r300
http://git.kernel.org/linus/fff1ce4dc6113b6fdc4e3a815ca5fd229408f8ef

[PATCH] drm/radeon: fix regression with AA resolve checking
https://patchwork.kernel.org/patch/576101/

https://bugzilla.redhat.com/show_bug.cgi?id=680000

Eugene
-- Eugene Teo / Red Hat Security Response Team

• This message: [ Message body ]
• Next message: Jon Oberheide: "Re: [oss-security] CVE request: kernel: fs/partitions: Kernel heap overflow via corrupted LDM partition tables"
• Previous message: Eugene Teo: "Re: [oss-security] CVE request: kernel: fs/partitions: Kernel heap overflow via corrupted LDM partition tables"
• Next in thread: Josh Bressers: "Re: [oss-security] CVE request: kernel: drm/radeon/kms: check AA resolve registers on r300"
• Reply: Josh Bressers: "Re: [oss-security] CVE request: kernel: drm/radeon/kms: check AA resolve registers on r300"
• Reply: Eugene Teo: "Re: [oss-security] CVE request: kernel: drm/radeon/kms: check AA resolve registers on r300"

• Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ]