linux

mirror of https://github.com/hardkernel/linux.git synced 2026-06-08 20:07:46 +09:00

Go to file

Lin, Zhenpeng dfec82f3e5 dccp: don't duplicate ccid when cloning dccp sock

commit d9ea761fdd upstream.

Commit 2677d20677 ("dccp: don't free ccid2_hc_tx_sock ...") fixed
a UAF but reintroduced CVE-2017-6074.

When the sock is cloned, two dccps_hc_tx_ccid will reference to the
same ccid. So one can free the ccid object twice from two socks after
cloning.

This issue was found by "Hadar Manor" as well and assigned with
CVE-2020-16119, which was fixed in Ubuntu's kernel. So here I port
the patch from Ubuntu to fix it.

The patch prevents cloned socks from referencing the same ccid.

Fixes: 2677d20677 ("dccp: don't free ccid2_hc_tx_sock ...")
Signed-off-by: Zhenpeng Lin <zplin@psu.edu>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2021-09-22 11:48:11 +02:00

arch

x86/mm: Fix kern_addr_valid() to cope with existing but not present entries

2021-09-22 11:48:10 +02:00

block

block: bfq: fix bfq_set_next_ioprio_data()

2021-09-22 11:47:59 +02:00

certs

certs: Trigger creation of RSA module signing key if it's not an RSA key

2021-09-22 11:47:51 +02:00

crypto

crypto: shash - avoid comparing pointers to exported functions under CFI

2021-07-20 16:15:44 +02:00

Documentation

docs: Fix infiniband uverbs minor number

2021-09-22 11:48:01 +02:00

drivers

ptp: dp83640: don't define PAGE0

2021-09-22 11:48:11 +02:00

firmware

Fix built-in early-load Intel microcode alignment

2020-01-23 08:21:29 +01:00

ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup()

2021-09-22 11:48:09 +02:00

include

mm/hugetlb: initialize hugetlb_usage in mm_init

2021-09-22 11:48:09 +02:00

init

pid: take a reference when initializing cad_pid

2021-06-10 13:24:06 +02:00

ipc

ipc/util.c: sysvipc_find_ipc() incorrectly updates position index

2020-05-20 08:18:40 +02:00

kernel

memcg: enable accounting for pids in nested pid namespaces

2021-09-22 11:48:09 +02:00

lib

bpf/tests: Do not PASS tests without actually testing the result

2021-09-22 11:48:04 +02:00

LICENSES

LICENSES: Remove CC-BY-SA-4.0 license text

2018-10-18 11:28:50 +02:00

mm/page_alloc: speed up the iteration of max_order

2021-09-22 11:47:48 +02:00

net

dccp: don't duplicate ccid when cloning dccp sock

2021-09-22 11:48:11 +02:00

samples

samples: bpf: Fix tracex7 error raised on the missing argument

2021-09-22 11:48:05 +02:00

scripts

scripts/tracing: fix the bug that can't parse raw_trace_func

2021-08-12 13:19:42 +02:00

security

Smack: Fix wrong semantics in smk_access_entry()

2021-09-22 11:48:03 +02:00

sound

ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B

2021-09-22 11:48:08 +02:00

tools

selftests/bpf: Enlarge select() timeout for test_maps

2021-09-22 11:48:08 +02:00

usr

initramfs: restore default compression behavior

2020-04-13 10:44:59 +02:00

virt

KVM: Use kvm_pfn_t for local PFN variable in hva_to_pfn_remapped()

2021-07-28 11:13:51 +02:00

.clang-format

clang-format: Set IndentWrappedFunctionNames false

2018-08-01 18:38:51 +02:00

.cocciconfig

scripts: add Linux .cocciconfig for coccinelle

2016-07-22 12:13:39 +02:00

.get_maintainer.ignore

…

.gitattributes

.gitattributes: set git diff driver for C source code files

2016-10-07 18:46:30 -07:00

.gitignore

Merge tag 'kbuild-v4.17-2' of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild

2018-04-15 17:21:30 -07:00

.mailmap

Merge tag 'libnvdimm-for-4.19_misc' of gitolite.kernel.org:pub/scm/linux/kernel/git/nvdimm/nvdimm

2018-08-25 18:13:10 -07:00

COPYING

COPYING: use the new text with points to the license files

2018-03-23 12:41:45 -06:00

CREDITS

9p: remove Ron Minnich from MAINTAINERS

2018-08-17 16:20:26 -07:00

Kbuild

Merge tag 'kbuild-v4.15' of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild

2017-11-17 17:45:29 -08:00

Kconfig

kconfig: move the "Executable file formats" menu to fs/Kconfig.binfmt

2018-08-02 08:06:55 +09:00

MAINTAINERS

Documentation/llvm: add documentation on building w/ Clang/LLVM

2020-09-26 18:01:31 +02:00

Makefile

Linux 4.19.206

2021-09-03 09:58:03 +02:00

README

Docs: Added a pointer to the formatted docs to README

2018-03-21 09:02:53 -06:00

README

Linux kernel
============

There are several guides for kernel developers and users. These guides can
be rendered in a number of formats, like HTML and PDF. Please read
Documentation/admin-guide/README.rst first.

In order to build the documentation, use ``make htmldocs`` or
``make pdfdocs``.  The formatted documentation can also be read online at:

    https://www.kernel.org/doc/html/latest/

There are various text files in the Documentation/ subdirectory,
several of them using the Restructured Text markup notation.
See Documentation/00-INDEX for a list of what is contained in each file.

Please read the Documentation/process/changes.rst file, as it contains the
requirements for building and running the kernel, and information about
the problems which may result by upgrading your kernel.