Kudo-san,

I'm sorry about this.

I think we can disable some DRM drivers, but I haven't received
response from related persons yet.
So, please simply disable nouveau driver.

Best regards,

Hidehiro Kawai
Hitachi, Ltd. Research & Development Group

From: masashi.kudo@cybertrust.co.jp <redacted>

Hi, Kawai-san,

It's been a while since we last chatted about this issue.
If it takes more time, shall we disable nouveau driver as you suggested?

Best regards,
--
M. Kudo

quoted

-----Original Message-----
From: 工藤　雅司（CTJ　OSS事業推進室）
Sent: Friday, December 25, 2020 6:28 PM
To: 河合英宏 / KAWAI，HIDEHIRO <redacted>;
'wens@csie.org' [off-list ref]
Cc: cip-dev@lists.cip-project.org; cip-members@lists.cip-project.org
Subject: RE: hitachi_omap defconfigs

Hi, Kawai-san,

Thanks very much for letting us know the current status.
We will wait for your response, so I would appreciate it if you can keep us updated.

Best regards,
--
M. Kudo

quoted

-----Original Message-----
From: 河合英宏 / KAWAI，HIDEHIRO <redacted>
Sent: Friday, December 25, 2020 3:34 PM
To: 工藤　雅司（CTJ　OSS事業推進室） <redacted>;
'wens@csie.org' [off-list ref]
Cc: cip-dev@lists.cip-project.org; cip-members@lists.cip-project.org
Subject: RE: hitachi_omap defconfigs

Kudo-san and ChenYu-san,

We are sorry for the inconvenience.  The confirmation will take some time.
If you'd like to solve this issue quickly, please disable nouveau driver now.
After the confirmation, we'll send an updated defconfig.

Best regards,

Hidehiro Kawai
Hitachi, Ltd. Research & Development Group

quoted

From: cip-members@lists.cip-project.org
[off-list ref] On Behalf Of Hidehiro Kawai

Hello Kudo-san and ChenYu-san,

Thanks for reporting the issue.
Including nouveau driver, it seems that our defconfigs have some
unneeded drivers.  I'm confirming this with our development team,
please wait

a moment.

quoted

Best regards,

Hidehiro Kawai
Hitachi, Ltd. Research & Development Group

quoted

From: cip-dev@lists.cip-project.org
[off-list ref] On Behalf Of
masashi.kudo@cybertrust.co.jp Hi, Hitachi-team,

Last week, CVE-2020-27820 [drm/nouveau UAF] was reported by the

following email.

quoted

quoted

https://clicktime.symantec.com/3HW3CdVzyukGSgx2iFmjhKS7Vc?u=http
s%3A%2F%2Fclicktime.symantec.com%2F3Hrgtrrm6ninbLpVgrZpbS37Vc%3F
u%3Dhttps%25
3A
%2 F%2Flore.kernel.org%2Fcip-dev%2FCAGb2v641%3DSr

fdDh9CS4fwWVrfuCG2O2oni9V_QsVJEza%2Bg5mRg%40mail.gmail.com%2FT%2

quoted

F%23

quoted

quoted

u

According to the kernel team analysis, it seems that the nouveau
driver is enabled in hitachi_omap defconfigs for both
4.4 and 4.19.
However, the configs are for OMAP platforms which, according to
our

understanding, don't have PCI for a graphics card.

quoted

quoted

So we think that the hitachi_omap defconfigs should be corrected
to disable

the nouveau driver.

quoted

quoted

We could be wrong, so please advise us. Once you confirm it to
be corrected,

we will go ahead to change it.

quoted

quoted

Best regards,
--
M. Kudo