Paul Moore 82a6cb7a8a audit: always check the netlink payload length in audit_receive_msg() ...

commit 7561252892 upstream.

This patch ensures that we always check the netlink payload length
in audit_receive_msg() before we take any action on the payload
itself.

Cc: stable@vger.kernel.org
Reported-by: syzbot+399c44bf1f43b8747403@syzkaller.appspotmail.com
Reported-by: syzbot+e4b12d8d202701f08b6d@syzkaller.appspotmail.com
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2020-03-05 16:43:42 +01:00

..

bpf

bpf, offload: Replace bitwise AND by logical AND in bpf_prog_offload_info_fill

2020-02-28 17:22:27 +01:00

cgroup

cgroup: Prevent double killing of css when enabling threaded cgroup

2020-02-05 21:22:42 +00:00

configs

…

debug

…

dma

dma-direct: don't check swiotlb=force in dma_direct_map_resource

2020-01-26 10:01:08 +01:00

events

perf/core: Fix mlock accounting in perf_mmap()

2020-02-11 04:35:54 -08:00

gcov

Revert "um: Enable CONFIG_CONSTRUCTORS"

2020-02-01 09:34:53 +00:00

irq

genirq/proc: Reject invalid affinity masks (again)

2020-02-28 17:22:26 +01:00

livepatch

…

locking

locking/lockdep: Fix buffer overrun problem in stack_trace[]

2020-01-23 08:22:39 +01:00

power

ACPI: PM: s2idle: Avoid possible race related to the EC GPE

2020-02-19 19:52:56 +01:00

printk

printk: fix exclusive_console replaying

2020-02-24 08:36:24 +01:00

rcu

rcu: Fix data-race due to atomic_t copy-by-value

2020-02-24 08:36:23 +01:00

sched

sched/fair: Prevent unlimited runtime on throttled group

2020-03-05 16:43:36 +01:00

time

alarmtimer: Make alarmtimer platform device child of RTC device

2020-02-24 08:36:57 +01:00

trace

trigger_next should increase position index

2020-02-24 08:36:59 +01:00

.gitignore

…

acct.c

…

async.c

…

audit_fsnotify.c

…

audit_tree.c

…

audit_watch.c

audit_get_nd(): don't unlock parent too early

2019-11-10 11:56:55 -05:00

audit.c

audit: always check the netlink payload length in audit_receive_msg()

2020-03-05 16:43:42 +01:00

audit.h

…

auditfilter.c

audit: fix error handling in audit_data_to_entry()

2020-03-05 16:43:42 +01:00

auditsc.c

…

backtracetest.c

…

bounds.c

…

capability.c

…

compat.c

…

configs.c

…

context_tracking.c

…

cpu_pm.c

…

cpu.c

cpu/hotplug, stop_machine: Fix stop_machine vs hotplug order

2020-02-24 08:36:23 +01:00

crash_core.c

…

crash_dump.c

…

cred.c

keys: Fix request_key() cache

2020-01-17 19:48:42 +01:00

delayacct.c

…

dma.c

…

elfcore.c

…

exec_domain.c

…

exit.c

exit: panic before exit_mm() on global init exit

2020-01-09 10:20:01 +01:00

extable.c

…

fail_function.c

…

fork.c

clone3: ensure copy_thread_tls is implemented

2020-01-14 20:08:35 +01:00

freezer.c

Revert "libata, freezer: avoid block device removal while system is frozen"

2019-10-06 09:11:37 -06:00

futex.c

futex: Prevent exit livelock

2019-11-29 10:10:14 +01:00

gen_kheaders.sh

kheaders: substituting --sort in archive creation

2019-10-17 09:08:19 +09:00

groups.c

…

hung_task.c

…

iomem.c

…

irq_work.c

…

jump_label.c

…

kallsyms.c

…

kcmp.c

…

Kconfig.freezer

…

Kconfig.hz

…

Kconfig.locks

…

Kconfig.preempt

…

kcov.c

…

kexec_core.c

…

kexec_elf.c

…

kexec_file.c

…

kexec_internal.h

…

kexec.c

…

kheaders.c

…

kmod.c

…

kprobes.c

…

ksysfs.c

…

kthread.c

kthread: make __kthread_queue_delayed_work static

2019-10-16 09:20:58 -07:00

latencytop.c

…

Makefile

…

module_signature.c

…

module_signing.c

…

module-internal.h

…

module.c

module: avoid setting info->name early in case we can fall back to info->mod->name

2020-02-24 08:36:54 +01:00

notifier.c

…

nsproxy.c

…

padata.c

padata: validate cpumask without removed CPU during offline

2020-02-24 08:36:34 +01:00

panic.c

panic: ensure preemption is disabled during panic()

2019-10-07 15:47:19 -07:00

params.c

…

pid_namespace.c

…

pid.c

…

profile.c

…

ptrace.c

ptrace: reintroduce usage of subjective credentials in ptrace_has_cap()

2020-01-23 08:22:36 +01:00

range.c

…

reboot.c

…

relay.c

…

resource.c

…

rseq.c

…

seccomp.c

seccomp: Check that seccomp_notif is zeroed out by the user

2020-01-09 10:19:57 +01:00

signal.c

cgroup: freezer: call cgroup_enter_frozen() with preemption disabled in ptrace_stop()

2019-10-11 08:39:57 -07:00

smp.c

…

smpboot.c

…

smpboot.h

…

softirq.c

…

stackleak.c

…

stacktrace.c

stacktrace: Don't skip first entry on noncurrent tasks

2019-11-04 21:19:25 +01:00

stop_machine.c

stop_machine: Avoid potential race behaviour

2019-10-17 12:47:12 +02:00

sys_ni.c

…

sys.c

…

sysctl_binary.c

…

sysctl.c

kernel: sysctl: make drop_caches write-only

2020-01-04 19:18:32 +01:00

task_work.c

…

taskstats.c

taskstats: fix data-race

2020-01-09 10:19:54 +01:00

test_kprobes.c

…

torture.c

…

tracepoint.c

…

tsacct.c

…

ucount.c

…

uid16.c

…

uid16.h

…

umh.c

…

up.c

…

user_namespace.c

…

user-return-notifier.c

…

user.c

…

utsname_sysctl.c

…

utsname.c

…

watchdog_hld.c

…

watchdog.c

watchdog/softlockup: Enforce that timestamp is valid on boot

2020-02-24 08:36:52 +01:00

workqueue_internal.h

…

workqueue.c

workqueue: Add RCU annotation for pwq list walk

2020-01-26 10:01:07 +01:00