Messages in this thread | | | Date | Mon, 29 Apr 2019 12:58:36 -0700 | From | Kees Cook <> | Subject | [GIT PULL] seccomp fixes for v5.1-rc8 |
| |
Hi Linus,
Please pull these seccomp fixes for v5.1-rc8. Syzbot found a use-after-free bug in seccomp due to flags that should not be allowed to be used together. Tycho fixed this, I updated the self-tests, and the syzkaller PoC has been running for several days without triggering KASan (before this fix, it would reproduce). These patches have also been in -next for almost a week, just to be sure.
Thanks!
-Kees
The following changes since commit 8c2ffd9174779014c3fe1f96d9dc3641d9175f00:
Linux 5.1-rc2 (2019-03-24 14:02:26 -0700)
are available in the Git repository at:
https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/seccomp-v5.1-rc8
for you to fetch changes up to 7a0df7fbc14505e2e2be19ed08654a09e1ed5bf6:
seccomp: Make NEW_LISTENER and TSYNC flags exclusive (2019-04-25 15:55:58 -0700)
---------------------------------------------------------------- seccomp use-after-free fix
- Add logic for making some seccomp flags exclusive (Tycho) - Update selftests for exclusivity testing (Kees)
---------------------------------------------------------------- Kees Cook (1): selftests/seccomp: Prepare for exclusive seccomp flags
Tycho Andersen (1): seccomp: Make NEW_LISTENER and TSYNC flags exclusive
kernel/seccomp.c | 17 ++++++++++++-- tools/testing/selftests/seccomp/seccomp_bpf.c | 34 ++++++++++++++++++++------- 2 files changed, 40 insertions(+), 11 deletions(-)
-- Kees Cook
| |