Tyler Hicks
e37957305d
irda: Only insert new objects into the global database via setsockopt ...
The irda_setsockopt() function conditionally allocates memory for a new
self->ias_object or, in some cases, reuses the existing
self->ias_object. Existing objects were incorrectly reinserted into the
LM_IAS database which corrupted the doubly linked list used for the
hashbin implementation of the LM_IAS database. When combined with a
memory leak in irda_bind(), this issue could be leveraged to create a
use-after-free vulnerability in the hashbin list. This patch fixes the
issue by only inserting newly allocated objects into the database.
CVE-2018-6555
Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Signed-off-by: Tyler Hicks <tyhicks@canonical.com>
Reviewed-by: Seth Arnold <seth.arnold@canonical.com>
Reviewed-by: Stefan Bader <stefan.bader@canonical.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2018-09-15 09:45:36 +02:00
2018-09-15 09:45:30 +02:00
2018-05-01 12:58:21 -07:00
2018-05-01 12:58:20 -07:00
2018-08-24 13:09:00 +02:00
2018-07-22 14:28:43 +02:00
2018-07-03 11:24:56 +02:00
2018-09-05 09:26:42 +02:00
2018-09-09 19:55:58 +02:00
2018-08-15 18:12:49 +02:00
2018-08-03 07:50:31 +02:00
2018-09-05 09:26:42 +02:00
2018-09-05 09:26:41 +02:00
2018-09-15 09:45:32 +02:00
2018-06-21 04:02:40 +09:00
2018-09-09 19:55:58 +02:00
2018-07-03 11:24:51 +02:00
2018-09-09 19:56:02 +02:00
2018-08-24 13:09:08 +02:00
2018-08-24 13:09:08 +02:00
2018-06-05 11:41:57 +02:00
2018-08-24 13:08:55 +02:00
2018-09-09 19:55:56 +02:00
2018-04-26 11:02:03 +02:00
2018-08-17 21:01:11 +02:00
2018-05-01 12:58:24 -07:00
2018-09-05 09:26:32 +02:00
2018-09-15 09:45:35 +02:00
2018-09-15 09:45:35 +02:00
2018-09-09 19:55:56 +02:00
2018-09-05 09:26:40 +02:00
2018-06-05 11:41:59 +02:00
2018-09-05 09:26:29 +02:00
2018-05-30 07:52:34 +02:00
2018-08-09 12:16:39 +02:00
2018-09-09 19:55:56 +02:00
2018-09-15 09:45:29 +02:00
2018-09-15 09:45:30 +02:00
2018-09-15 09:45:31 +02:00
2018-09-15 09:45:29 +02:00
2018-08-22 07:46:11 +02:00
2018-09-15 09:45:35 +02:00
2018-05-30 07:52:27 +02:00
2018-09-09 19:55:54 +02:00
2018-09-15 09:45:31 +02:00
2018-09-09 19:55:53 +02:00
2018-08-03 07:50:38 +02:00
2018-05-25 16:17:47 +02:00
2018-09-15 09:45:28 +02:00
2018-09-09 19:55:57 +02:00
2018-09-09 19:55:53 +02:00
2018-08-24 13:09:04 +02:00
2018-09-15 09:45:29 +02:00
2018-08-24 13:09:06 +02:00
2018-04-26 11:02:13 +02:00
2018-09-09 19:56:01 +02:00
2018-09-05 09:26:36 +02:00
2018-08-24 13:09:14 +02:00
2018-07-03 11:24:52 +02:00
2018-05-30 07:52:28 +02:00
2018-09-15 09:45:31 +02:00
2018-05-30 07:52:39 +02:00
2018-08-24 13:08:59 +02:00
2018-08-15 18:12:48 +02:00
2018-09-05 09:26:39 +02:00
2018-09-15 09:45:28 +02:00
2018-09-05 09:26:42 +02:00
2018-07-25 11:25:10 +02:00
2018-09-15 09:45:27 +02:00
2018-08-03 07:50:40 +02:00
2018-06-21 04:02:48 +09:00
2018-07-03 11:24:59 +02:00
2018-09-09 19:55:57 +02:00
2018-09-15 09:45:30 +02:00
2018-09-15 09:45:30 +02:00
2018-08-24 13:09:19 +02:00
2018-09-09 19:55:53 +02:00
2018-09-15 09:45:36 +02:00
2018-09-05 09:26:41 +02:00
2018-06-21 04:02:54 +09:00
2018-08-03 07:50:37 +02:00
2018-04-24 09:36:29 +02:00
2018-09-09 19:55:56 +02:00
2018-09-15 09:45:35 +02:00
2018-08-03 07:50:23 +02:00
2018-09-15 09:45:25 +02:00
2018-09-09 19:56:01 +02:00
2018-09-15 09:45:27 +02:00
2018-07-03 11:24:47 +02:00
2018-08-03 07:50:24 +02:00
2018-09-15 09:45:30 +02:00
2018-05-30 07:52:30 +02:00
e37957305d