lkml.org 
[lkml]   [2019]   [Apr]   [29]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
Subject[GIT PULL] seccomp fixes for v5.1-rc8
Hi Linus,

Please pull these seccomp fixes for v5.1-rc8. Syzbot found a use-after-free
bug in seccomp due to flags that should not be allowed to be used together.
Tycho fixed this, I updated the self-tests, and the syzkaller PoC has been
running for several days without triggering KASan (before this fix, it
would reproduce). These patches have also been in -next for almost a week,
just to be sure.

Thanks!

-Kees

The following changes since commit 8c2ffd9174779014c3fe1f96d9dc3641d9175f00:

Linux 5.1-rc2 (2019-03-24 14:02:26 -0700)

are available in the Git repository at:

https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/seccomp-v5.1-rc8

for you to fetch changes up to 7a0df7fbc14505e2e2be19ed08654a09e1ed5bf6:

seccomp: Make NEW_LISTENER and TSYNC flags exclusive (2019-04-25 15:55:58 -0700)

----------------------------------------------------------------
seccomp use-after-free fix

- Add logic for making some seccomp flags exclusive (Tycho)
- Update selftests for exclusivity testing (Kees)

----------------------------------------------------------------
Kees Cook (1):
selftests/seccomp: Prepare for exclusive seccomp flags

Tycho Andersen (1):
seccomp: Make NEW_LISTENER and TSYNC flags exclusive

kernel/seccomp.c | 17 ++++++++++++--
tools/testing/selftests/seccomp/seccomp_bpf.c | 34 ++++++++++++++++++++-------
2 files changed, 40 insertions(+), 11 deletions(-)

--
Kees Cook

\
 
 \ /
  Last update: 2019-04-29 21:59    [W:0.040 / U:0.080 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site