Messages in this thread | | | Date | Thu, 16 Aug 2018 12:26:44 -0700 (PDT) | Subject | Re: [PATCH] isdn: Disable IIOCDBGVAR | From | David Miller <> |
| |
From: Kees Cook <keescook@chromium.org> Date: Wed, 15 Aug 2018 12:14:05 -0700
> It was possible to directly leak the kernel address where the isdn_dev > structure pointer was stored. This is a kernel ASLR bypass for anyone > with access to the ioctl. The code had been present since the beginning > of git history, though this shouldn't ever be needed for normal operation, > therefore remove it. > > Reported-by: Al Viro <viro@zeniv.linux.org.uk> > Cc: Karsten Keil <isdn@linux-pingi.de> > Signed-off-by: Kees Cook <keescook@chromium.org> > --- > netdev doesn't like explict stable markings, so I'll just ask here that it > get included in -stable please. :)
Applied and queued up for -stable, thanks :)
| |