-----Original Message-----
From: 工藤　雅司（CTJ　OSS事業推進室）
Sent: Friday, December 25, 2020 6:28 PM
To: 河合英宏 / KAWAI，HIDEHIRO <hidehiro.kawai.ez@...>;
'wens@...' <wens@...>
Cc: cip-dev@...; cip-members@...
Subject: RE: hitachi_omap defconfigs

Hi, Kawai-san,

Thanks very much for letting us know the current status.
We will wait for your response, so I would appreciate it if you can keep us updated.

Best regards,
--
M. Kudo

-----Original Message-----
From: 河合英宏 / KAWAI，HIDEHIRO <hidehiro.kawai.ez@...>
Sent: Friday, December 25, 2020 3:34 PM
To: 工藤　雅司（CTJ　OSS事業推進室） <masashi.kudo@...>;
'wens@...' <wens@...>
Cc: cip-dev@...; cip-members@...
Subject: RE: hitachi_omap defconfigs

Kudo-san and ChenYu-san,

We are sorry for the inconvenience. The confirmation will take some time.
If you'd like to solve this issue quickly, please disable nouveau driver now.
After the confirmation, we'll send an updated defconfig.

Best regards,

Hidehiro Kawai
Hitachi, Ltd. Research & Development Group

From: cip-members@...
<cip-members@...> On Behalf Of Hidehiro Kawai

Hello Kudo-san and ChenYu-san,

Thanks for reporting the issue.
Including nouveau driver, it seems that our defconfigs have some
unneeded drivers. I'm confirming this with our development team,
please wait

a moment.

Best regards,

Hidehiro Kawai
Hitachi, Ltd. Research & Development Group

From: cip-dev@...
<cip-dev@...> On Behalf Of
masashi.kudo@... Hi, Hitachi-team,

Last week, CVE-2020-27820 [drm/nouveau UAF] was reported by the

following email.

https://clicktime.symantec.com/3Hrgtrrm6ninbLpVgrZpbS37Vc?u=https%
3A
%2 F%2Flore.kernel.org%2Fcip-dev%2FCAGb2v641%3DSr

fdDh9CS4fwWVrfuCG2O2oni9V_QsVJEza%2Bg5mRg%40mail.gmail.com%2FT%2

F%23

u

According to the kernel team analysis, it seems that the nouveau
driver is enabled in hitachi_omap defconfigs for both
4.4 and 4.19.
However, the configs are for OMAP platforms which, according to
our

understanding, don't have PCI for a graphics card.

So we think that the hitachi_omap defconfigs should be corrected
to disable

the nouveau driver.

We could be wrong, so please advise us. Once you confirm it to be
corrected,

we will go ahead to change it.

Best regards,
--
M. Kudo