aboutsummaryrefslogtreecommitdiffstats
path: root/docs/linux
diff options
context:
space:
mode:
Diffstat (limited to 'docs/linux')
-rw-r--r--docs/linux/found_bugs_usb.md6
1 files changed, 4 insertions, 2 deletions
diff --git a/docs/linux/found_bugs_usb.md b/docs/linux/found_bugs_usb.md
index bf830884c..667fef503 100644
--- a/docs/linux/found_bugs_usb.md
+++ b/docs/linux/found_bugs_usb.md
@@ -2,12 +2,14 @@
## Reported by syzbot
-The bugs that were reported by the USB fuzzing instance can be found [here](https://syzkaller.appspot.com/upstream?manager=ci2-upstream-usb).
+Starting from early 2019, bugs in the USB drivers are being automatically reported by the USB fuzzing instance of syzbot and can be found [here](https://syzkaller.appspot.com/upstream?manager=ci2-upstream-usb). A list of CVEs for some of those can be found here [here](https://www.openwall.com/lists/oss-security/2019/08/20/2).
-The USB bugs that were reported by the KMSAN fuzzing instance can be either found [here](https://groups.google.com/forum/#!searchin/syzkaller-bugs/%22kmsan%22$20%22usb%22%7Csort:date) or [here](https://syzkaller.appspot.com/upstream?manager=ci-upstream-kmsan-gce) (via a manual search, e.g. for `kernel-usb-infoleak`).
+Some of the USB bugs are reported by the KMSAN fuzzing instance and can be either found [here](https://groups.google.com/forum/#!searchin/syzkaller-bugs/%22kmsan%22$20%22usb%22%7Csort:date) or [here](https://syzkaller.appspot.com/upstream?manager=ci-upstream-kmsan-gce) (via a manual search, e.g. for `kernel-usb-infoleak`).
## Manually reported
+These are the bugs that were manually reported before USB fuzzing was integrated into syzbot.
+
### USB drivers
* usb/core: memory corruption due to an out-of-bounds access in usb_destroy_configuration [[fix](https://www.spinics.net/lists/linux-usb/msg163644.html)] [CVE-2017-17558]