Re: PROBLEM: null-ptr deref in keyring_search_aux may lead to denial of service

[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

 



Hi David,

It is true on recent kernels. But on some long-term branches (I've
tested on 3.2.86, released Feb 2017), no check was done on either user
permission or key type. It can be triggered by non-privileged user.

Best Regards,
James

2017-03-03 18:07 GMT+08:00 David Howells <dhowells@xxxxxxxxxx>:
> idl3r <idler1984@xxxxxxxxx> wrote:
>
>> syscall(__NR_request_key, "dead", "abc", "abc", 0, 0, 0);
>
> Hmmm...  You shouldn't be able to deal with dead keys at all.
>
> David
--
To unsubscribe from this list: send the line "unsubscribe keyrings" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html




[Index of Archives]     [Linux Kernel Discussion]     [Linux Crypto]     [The Year; 2038 Problem]     [Ethernet Bridging]     [Linux Wireless Networking]     [Linux WPAN Networking]     [Linux Bluetooth Networking]     [Linux ATH6KL Networking]     [Linux Networking Users]     [Linux Coverity]     [VLAN]     [Git]     [IETF Annouce]     [Linux Assembly]     [Security]     [Bugtraq]     [Yosemite Information]     [MIPS Linux]     [ARM Linux Kernel]     [ARM Linux]     [Linux Virtualization]     [Linux IDE]     [Linux RAID]     [Linux SCSI]

  Powered by Linux