diff options
| author | Andrey Konovalov <andreyknvl@google.com> | 2019-08-21 16:32:30 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2019-08-21 16:32:30 +0200 |
| commit | 984250d5080e0bf455725ff96551e35c3ae59457 (patch) | |
| tree | 13724b943318ec3823385c7e6c419eaf4c7c7d88 /docs/linux | |
| parent | 8570f91c22af0b9645d0a1c05a3b5a73fe1829be (diff) | |
Update found_bugs_usb.md
Diffstat (limited to 'docs/linux')
| -rw-r--r-- | docs/linux/found_bugs_usb.md | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/docs/linux/found_bugs_usb.md b/docs/linux/found_bugs_usb.md index bf830884c..667fef503 100644 --- a/docs/linux/found_bugs_usb.md +++ b/docs/linux/found_bugs_usb.md @@ -2,12 +2,14 @@ ## Reported by syzbot -The bugs that were reported by the USB fuzzing instance can be found [here](https://syzkaller.appspot.com/upstream?manager=ci2-upstream-usb). +Starting from early 2019, bugs in the USB drivers are being automatically reported by the USB fuzzing instance of syzbot and can be found [here](https://syzkaller.appspot.com/upstream?manager=ci2-upstream-usb). A list of CVEs for some of those can be found here [here](https://www.openwall.com/lists/oss-security/2019/08/20/2). -The USB bugs that were reported by the KMSAN fuzzing instance can be either found [here](https://groups.google.com/forum/#!searchin/syzkaller-bugs/%22kmsan%22$20%22usb%22%7Csort:date) or [here](https://syzkaller.appspot.com/upstream?manager=ci-upstream-kmsan-gce) (via a manual search, e.g. for `kernel-usb-infoleak`). +Some of the USB bugs are reported by the KMSAN fuzzing instance and can be either found [here](https://groups.google.com/forum/#!searchin/syzkaller-bugs/%22kmsan%22$20%22usb%22%7Csort:date) or [here](https://syzkaller.appspot.com/upstream?manager=ci-upstream-kmsan-gce) (via a manual search, e.g. for `kernel-usb-infoleak`). ## Manually reported +These are the bugs that were manually reported before USB fuzzing was integrated into syzbot. + ### USB drivers * usb/core: memory corruption due to an out-of-bounds access in usb_destroy_configuration [[fix](https://www.spinics.net/lists/linux-usb/msg163644.html)] [CVE-2017-17558] |