tag 3168267531286945f6976a9bce62d88698d80bc8
tagger The Android Open Source Project <initial-contribution@android.com> Wed Oct 12 09:44:46 2016 -0700
object cf233a679eac92e8bd5ea8fc5c9e203b39876882

Android Wear 6.0.1 Release 0.79

commit cf233a679eac92e8bd5ea8fc5c9e203b39876882
author Itsuki Yamashita <yamashitai@casio.co.jp> Mon Aug 22 11:21:49 2016 +0900
committer Itsuki Yamashita <yamashitai@casio.co.jp> Mon Aug 22 14:07:59 2016 +0900
tree 0018b15a07c89ecfde5de645bf4b3db3d06b2962
parent 4e09a7dd6a3217a5270745ba15bb0ee53dc95a64

Fix denial of service vulnerability in kernel ext4 file system

Multiple race conditions in the ext4 filesystem implementation in the Linux kernel
before 4.5 allow local users to cause a denial of service (disk corruption) by
writing to a page that is associated with a different user's file after
unsynchronized hole punching and page-fault handling.
The fix is designed to disable support for the fallocate
FALLOC_FL_PUNCH_HOLE to prevent the race conditions.
A-28760453
CVE-2015-8839

Change-Id: I83afe9d006b3d3e31b182ecbbf5db32a15178e7c
Signed-off-by: Itsuki Yamashita <yamashitai@casio.co.jp>