diff options
| author | Herbert Xu <herbert@gondor.apana.org.au> | 2022-10-25 14:06:48 +0800 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2022-12-08 11:16:29 +0100 |
| commit | 2f2ed8f603e1d71f0d4973718bfad90bd44812f4 (patch) | |
| tree | 950202ba96bf0faf858573d13ff3d4c2fd3baa29 /arch | |
| parent | 827c256b26190799629977a6ae3d2d148c59c07a (diff) | |
| download | linux-stable-2f2ed8f603e1d71f0d4973718bfad90bd44812f4.tar.gz linux-stable-2f2ed8f603e1d71f0d4973718bfad90bd44812f4.tar.bz2 linux-stable-2f2ed8f603e1d71f0d4973718bfad90bd44812f4.zip | |
af_key: Fix send_acquire race with pfkey_register
[ Upstream commit 7f57f8165cb6d2c206e2b9ada53b9e2d6d8af42f ]
The function pfkey_send_acquire may race with pfkey_register
(which could even be in a different name space). This may result
in a buffer overrun.
Allocating the maximum amount of memory that could be used prevents
this.
Reported-by: syzbot+1e9af9185d8850e2c2fa@syzkaller.appspotmail.com
Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Reviewed-by: Sabrina Dubroca <sd@queasysnail.net>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Diffstat (limited to 'arch')
0 files changed, 0 insertions, 0 deletions