Messages in this thread | | | Date | Tue, 24 Jun 2014 14:01:38 -0400 | From | Benjamin LaHaise <> | Subject | [PATCH 0/2] aio: fixes for kernel memory disclosure in aio read events |
| |
Please pull the following 2 fixes from my aio-fixes git tree at git://git.kvack.org/~bcrl/aio-fixes.git . These fix a kernel memory disclosure issue (arbitrary kmap() & copy_to_user()) revealed in CVE-2014-0206 by changes that were introduced in v3.10.
Benjamin LaHaise (2): aio: fix aio request leak when events are reaped by userspace aio: fix kernel memory disclosure in io_getevents() introduced in v3.10
fs/aio.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-)
-- 1.8.2.1
-- "Thought is the essence of where you are now."
| |