Willy Tarreau 94bee2c0e1 net/appletalk: fix minor pointer leak to userspace in SIOCFINDIPDDPRT ...

commit 9824dfae5741275473a23a7ed5756c7b6efacc9d upstream.

Fields ->dev and ->next of struct ipddp_route may be copied to
userspace on the SIOCFINDIPDDPRT ioctl. This is only accessible
to CAP_NET_ADMIN though. Let's manually copy the relevant fields
instead of using memcpy().

BugLink: http://blog.infosectcbr.com.au/2018/09/linux-kernel-infoleaks.html
Cc: Jann Horn <jannh@google.com>
Signed-off-by: Willy Tarreau <w@1wt.eu>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
CVE-2018-20511
Signed-off-by: Kevin F. Haggerty <haggertk@lineageos.org>

Change-Id: I74f1982a5c0a14514348aaecbc351bc3249c52da

2020-03-07 14:01:45 +01:00

..

appletalk

net/appletalk: fix minor pointer leak to userspace in SIOCFINDIPDDPRT

2020-03-07 14:01:45 +01:00

arcnet

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

bonding

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

caif

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

can

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

cris

…

dsa

…

ethernet

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

fddi

…

hamradio

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

hippi

…

hyperv

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

irda

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

phy

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

plip

…

ppp

Merge remote-tracking branch 'google-common/deprecated/android-3.4' into lineage-16.0

2019-08-06 11:41:21 +02:00

slip

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

team

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

tokenring

…

usb

USB: hso: Fix OOB memory access in hso_probe/hso_get_config_data

2020-03-07 14:01:44 +01:00

vmxnet3

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

wan

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

wimax

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

wireless

net: wireless: bcmdhd: fix integer overflow in wl_get_assoc_ies

2019-08-08 16:35:11 +02:00

xen-netback

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

dummy.c

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

eql.c

…

ifb.c

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

Kconfig

…

LICENSE.SRC

…

loopback.c

net: Loopback ifindex is constant now

2019-08-09 11:44:53 +02:00

macvlan.c

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

macvtap.c

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

Makefile

…

mdio.c

…

mii.c

…

netconsole.c

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

rionet.c

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

sb1000.c

…

Space.c

…

sungem_phy.c

…

tun.c

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

veth.c

…

virtio_net.c

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

xen-netfront.c

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00