Messages in this thread | | | Date | Thu, 31 Aug 2023 00:59:21 +0200 | From | Florian Westphal <> | Subject | Re: [PATCH nf] netfilter/osf: avoid OOB read |
| |
Wander Lairson Costa <wander@redhat.com> wrote: > The opt_num field is controlled by user mode and is not currently > validated inside the kernel. An attacker can take advantage of this to > trigger an OOB read and potentially leak information.
[..]
Can you send a v2 that rejects bogus nf_osf_user_finger structs?
nfnl_osf_add_callback() seems to be the right place to refuse it.
| |