Re: [PATCH] fix a kernel infoleak in x25 module
From: David Miller
Date: Mon May 09 2016 - 22:47:14 EST
From: Kangjie Lu <kangjielu@xxxxxxxxx>
Date: Sun, 8 May 2016 12:10:14 -0400
> Stack object "dte_facilities" is allocated in x25_rx_call_request(),
> which is supposed to be initialized in x25_negotiate_facilities.
> However, 5 fields (8 bytes in total) are not initialized. This
> object is then copied to userland via copy_to_user, thus infoleak
> occurs.
>
> Signed-off-by: Kangjie Lu <kjlu@xxxxxxxxxx>
Applied and queued up for -stable thanks.
Please start formatting your Subject lines properly, I've been fixing
all of them up by hand.
You should specify a subsystem name prefix, then a ":" character, then
a space, then a description of your change. For example, for this
patch an appropriate Subject would have been:
[PATCH] x25: Fix a kernel infoleak in x25_negotiate_facilities().
Thanks.