diff options
| author | Michael S. Tsirkin <mst@redhat.com> | 2014-03-27 12:53:37 +0200 |
|---|---|---|
| committer | Ben Hutchings <ben@decadent.org.uk> | 2014-04-30 16:23:17 +0100 |
| commit | 4334fca3512d179726666ad18459965916a1f189 (patch) | |
| tree | cae66d774b0ce8f7a9026eb9b19ed814a513bc88 /net | |
| parent | cb505037a28ad1d8c378b40366e17fbbc44d10e6 (diff) | |
| download | kernel_samsung_smdk4412-4334fca3512d179726666ad18459965916a1f189.zip kernel_samsung_smdk4412-4334fca3512d179726666ad18459965916a1f189.tar.gz kernel_samsung_smdk4412-4334fca3512d179726666ad18459965916a1f189.tar.bz2 | |
vhost: validate vhost_get_vq_desc return value
[ Upstream commit a39ee449f96a2cd44ce056d8a0a112211a9b1a1f ]
vhost fails to validate negative error code
from vhost_get_vq_desc causing
a crash: we are using -EFAULT which is 0xfffffff2
as vector size, which exceeds the allocated size.
The code in question was introduced in commit
8dd014adfea6f173c1ef6378f7e5e7924866c923
vhost-net: mergeable buffers support
CVE-2014-0055
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
Diffstat (limited to 'net')
0 files changed, 0 insertions, 0 deletions