oss-sec mailing list archives

CVE Request: Linux kernel: sys_sendto/sys_recvfrom does not validate the user provided ubuf pointer


From: Petr Matousek <pmatouse () redhat com>
Date: Mon, 23 Mar 2015 18:25:35 +0100

References:
https://twitter.com/grsecurity/status/579050211605102592
https://twitter.com/grsecurity/status/579075689439059968

Upstream patch:
http://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=4de930efc23b92ddf88ce91c405ee645fe6e27ea

Thanks,
-- 
Petr Matousek / Red Hat Product Security
PGP: 0xC44977CA 8107 AF16 A416 F9AF 18F3  D874 3E78 6F42 C449 77CA


Current thread: