projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 6789758) | patch
waitid(): Add missing access_ok() checks
authorKees Cook <keescook@chromium.org>
Mon, 9 Oct 2017 18:36:52 +0000 (11:36 -0700)
committerSalvatore Bonaccorso <carnil@debian.org>
Sun, 15 Oct 2017 06:57:36 +0000 (07:57 +0100)
commit00296fa590d73b573ff2cded5a8372fec5f04ad0
tree2acccfc24d65e1b98e0d1a009b37f8537f36caeetree | snapshot
parent6789758c67c06d5572ccb949e8d92eb19c93493acommit | diff
waitid(): Add missing access_ok() checks

Adds missing access_ok() checks.

CVE-2017-5123

Reported-by: Chris Salls <chrissalls5@gmail.com>
Signed-off-by: Kees Cook <keescook@chromium.org>
Acked-by: Al Viro <viro@zeniv.linux.org.uk>
Fixes: 4c48abe91be0 ("waitid(): switch copyout of siginfo to unsafe_put_user()")
Cc: stable@kernel.org # 4.13
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Gbp-Pq: Topic bugfix/all
Gbp-Pq: Name waitid-Add-missing-access_ok-checks.patch
kernel/exit.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.