Description: Integer overflow in drivers/gpu/drm/udl/udl_fb.c:udl_fb_mmap() can allow attackers to execute code in kernel space References: https://patchwork.freedesktop.org/patch/211845/ Notes: bwh> udl was added in 3.4, and wheezy has DRM from 3.4 so it *is* affected. Bugs: upstream: released (4.16-rc7) [3b82a4db8eaccce735dffd50b4d4e1578099b8e8] 4.9-upstream-stable: released (4.9.91) [4ac9ab4f5f45d1ad0585c7bfa9ccff43b9984045] 3.16-upstream-stable: released (3.16.57) [c2f377300d828234a16a6dc35402bc313bb15bed] 3.2-upstream-stable: N/A "Vulnerable code not present" sid: released (4.15.17-1) 4.9-stretch-security: released (4.9.88-1) [bugfix/all/drm-udl-properly-check-framebuffer-mmap-offsets.patch] 3.16-jessie-security: released (3.16.56-1) [bugfix/all/drm-udl-properly-check-framebuffer-mmap-offsets.patch] 3.2-wheezy-security: released (3.2.101-1) [bugfix/all/drm-udl-properly-check-framebuffer-mmap-offsets.patch]