[PATCH] drm: integer overflow in drm_mode_dirtyfb_ioctl()

[Greg KH]

On Wed, Dec 14, 2011 at 08:34:29AM -0500, David Airlie wrote:
> 
> ----- Original Message -----
> > From: "Eugene Teo" <eugeneteo at kernel.sg>
> > To: "Xi Wang" <xi.wang at gmail.com>
> > Cc: "David Airlie" <airlied at linux.ie>, dri-devel at lists.freedesktop.org, linux-kernel at vger.kernel.org,
> > security at kernel.org, "Dave Airlie" <airlied at redhat.com>
> > Sent: Wednesday, 14 December, 2011 1:16:49 PM
> > Subject: Re: [PATCH] drm: integer overflow in drm_mode_dirtyfb_ioctl()
> > 
> > Cc'ed Dave's work email.
> 
> This is already in Linus tree, went there a while ago.
> 
> a5cd335165e31db9dbab636fd29895d41da55dd2

And it was in the 3.0.13 and 3.1.5 kernel releases.

greg k-h