CM10DNA/android_kernel_htc_dlx — pull request #12 by crpalmer (2013-05-27 10:46:59+00:00)
Title: CVE-2013-2595: Untrested memory mapping in camera driver

The camera driver provides several interfaces to user space
clients. The user space clients communicate to the kernel via
syscalls such as ioctl or mmap. The camera driver provides an
uncontrolled mmap interface that allows an application with
access to the device file to map physical memory exceeding the
camera driver.s memory into user space. A locally installed,
unprivileged application can use this flaw to escalate privileges.

Code to handle MSM_CAM_IOCTL_SET_MEM_MAP_INFO IOCTL and associated
code was removed, as it is obsolete.

See:

https://www.codeaurora.org/projects/security-advisories/security-advisory-cve-2013-2595