staging: ion: Fix ION subsystem privilege vulnerability
authorGagan Grover <ggrover@nvidia.com>
Fri, 25 Nov 2016 12:28:44 +0000 (17:28 +0530)
committerWinnie Hsu <whsu@nvidia.com>
Thu, 19 Apr 2018 17:55:47 +0000 (10:55 -0700)
commitff6dbd5dff104b4d6d4aeeeafe90493e377474e2
treeb508ad8b61095ba4850f211b634100ee36b5b6c1
parent946ad0dedcd475c32e4c455d21c5c6df12caa6f7
staging: ion: Fix ION subsystem privilege vulnerability

A malicious application can take advantage of the ION kmalloc heap
to create a specific memory chunk size to exercise a rowhammer
attack on the physical hardware.

The fix is designed to disable ION heap type.

CVE-2016-6728: A-30400942

Bug 1823317

Change-Id: I6b6d891a85da0c175f88cc1a3e48875796db80d4
Signed-off-by: Gagan Grover <ggrover@nvidia.com>
Reviewed-on: https://git-master.nvidia.com/r/1690291
GVS: Gerrit_Virtual_Submit
Reviewed-by: Bibek Basu <bbasu@nvidia.com>
Tested-by: Amulya Yarlagadda <ayarlagadda@nvidia.com>
Reviewed-by: Winnie Hsu <whsu@nvidia.com>
drivers/staging/android/ion/ion_heap.c