nl80211: check for the required netlink attributes presence
authorVladis Dronov <vdronov@redhat.com>
Tue, 12 Sep 2017 22:21:21 +0000 (22:21 +0000)
committerSalvatore Bonaccorso <carnil@debian.org>
Sun, 15 Oct 2017 06:57:36 +0000 (07:57 +0100)
commitffd723c5cc1ed411115e74fe42d55f4a14991118
treee1fd0afd22d2399ecef4bbf4af4640f0538ae708
parentba2824ec4627666e025c560b7ac782f2b5c363c9
nl80211: check for the required netlink attributes presence

nl80211_set_rekey_data() does not check if the required attributes
NL80211_REKEY_DATA_{REPLAY_CTR,KEK,KCK} are present when processing
NL80211_CMD_SET_REKEY_OFFLOAD request. This request can be issued by
users with CAP_NET_ADMIN privilege and may result in NULL dereference
and a system crash. Add a check for the required attributes presence.
This patch is based on the patch by bo Zhang.

This fixes CVE-2017-12153.

References: https://bugzilla.redhat.com/show_bug.cgi?id=1491046
Fixes: e5497d766ad ("cfg80211/nl80211: support GTK rekey offload")
Cc: <stable@vger.kernel.org> # v3.1-rc1
Reported-by: bo Zhang <zhangbo5891001@gmail.com>
Signed-off-by: Vladis Dronov <vdronov@redhat.com>
Gbp-Pq: Topic bugfix/all
Gbp-Pq: Name nl80211-check-for-the-required-netlink-attributes-presence.patch
net/wireless/nl80211.c