Re: PROBLEM: null-ptr deref in keyring_search_aux may lead to denial of service

[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

 



On Fri, Mar 03, 2017 at 06:19:35PM +0800, Idler wrote:
> Hi David,
> 
> It is true on recent kernels. But on some long-term branches (I've
> tested on 3.2.86, released Feb 2017), no check was done on either user
> permission or key type. It can be triggered by non-privileged user.

Confirmed up to 3.14.79 FWIW, 4.4 is not affected, not tested in between.

Regards,
Willy
--
To unsubscribe from this list: send the line "unsubscribe keyrings" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html




[Index of Archives]     [Linux Kernel Discussion]     [Linux Crypto]     [The Year; 2038 Problem]     [Ethernet Bridging]     [Linux Wireless Networking]     [Linux WPAN Networking]     [Linux Bluetooth Networking]     [Linux ATH6KL Networking]     [Linux Networking Users]     [Linux Coverity]     [VLAN]     [Git]     [IETF Annouce]     [Linux Assembly]     [Security]     [Bugtraq]     [Yosemite Information]     [MIPS Linux]     [ARM Linux Kernel]     [ARM Linux]     [Linux Virtualization]     [Linux IDE]     [Linux RAID]     [Linux SCSI]

  Powered by Linux