linux/drivers/misc/mic
Ashutosh Dixit 72aaf646fb misc: mic: Fix for double fetch security bug in VOP driver
commit 9bf292bfca upstream.

The MIC VOP driver does two successive reads from user space to read a
variable length data structure. Kernel memory corruption can result if
the data structure changes between the two reads. This patch disallows
the chance of this happening.

Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=116651
Reported by: Pengfei Wang <wpengfeinudt@gmail.com>
Reviewed-by: Sudeep Dutt <sudeep.dutt@intel.com>
Signed-off-by: Ashutosh Dixit <ashutosh.dixit@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
[bwh: Backported to 3.16:
 - Adjust filename, context
 - goto exit on failure]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
History 2016-08-22 22:38:29 +01:00
..
card misc: mic: Add include of <linux/irqreturn.h> 2014-02-18 13:41:14 -07:00
common misc: mic: header file cleanups. 2013-09-27 17:20:18 -07:00
host misc: mic: Fix for double fetch security bug in VOP driver 2016-08-22 22:38:29 +01:00
Kconfig Kconfig: Remove useless "default N" lines 2014-02-20 14:38:06 +01:00
Makefile Intel MIC Card Driver for X100 family. 2013-09-26 13:50:56 -07:00