* [GIT PULL] seccomp fixes for v5.1-rc8
@ 2019-04-29 19:58 Kees Cook
2019-04-29 22:10 ` pr-tracker-bot
0 siblings, 1 reply; 2+ messages in thread
From: Kees Cook @ 2019-04-29 19:58 UTC (permalink / raw)
To: Linus Torvalds
Cc: linux-kernel, James Morris, syzbot+b562969adb2e04af3442, Tycho Andersen
Hi Linus,
Please pull these seccomp fixes for v5.1-rc8. Syzbot found a use-after-free
bug in seccomp due to flags that should not be allowed to be used together.
Tycho fixed this, I updated the self-tests, and the syzkaller PoC has been
running for several days without triggering KASan (before this fix, it
would reproduce). These patches have also been in -next for almost a week,
just to be sure.
Thanks!
-Kees
The following changes since commit 8c2ffd9174779014c3fe1f96d9dc3641d9175f00:
Linux 5.1-rc2 (2019-03-24 14:02:26 -0700)
are available in the Git repository at:
https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/seccomp-v5.1-rc8
for you to fetch changes up to 7a0df7fbc14505e2e2be19ed08654a09e1ed5bf6:
seccomp: Make NEW_LISTENER and TSYNC flags exclusive (2019-04-25 15:55:58 -0700)
----------------------------------------------------------------
seccomp use-after-free fix
- Add logic for making some seccomp flags exclusive (Tycho)
- Update selftests for exclusivity testing (Kees)
----------------------------------------------------------------
Kees Cook (1):
selftests/seccomp: Prepare for exclusive seccomp flags
Tycho Andersen (1):
seccomp: Make NEW_LISTENER and TSYNC flags exclusive
kernel/seccomp.c | 17 ++++++++++++--
tools/testing/selftests/seccomp/seccomp_bpf.c | 34 ++++++++++++++++++++-------
2 files changed, 40 insertions(+), 11 deletions(-)
--
Kees Cook
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: [GIT PULL] seccomp fixes for v5.1-rc8
2019-04-29 19:58 [GIT PULL] seccomp fixes for v5.1-rc8 Kees Cook
@ 2019-04-29 22:10 ` pr-tracker-bot
0 siblings, 0 replies; 2+ messages in thread
From: pr-tracker-bot @ 2019-04-29 22:10 UTC (permalink / raw)
To: Kees Cook
Cc: Linus Torvalds, linux-kernel, James Morris,
syzbot+b562969adb2e04af3442, Tycho Andersen
The pull request you sent on Mon, 29 Apr 2019 12:58:36 -0700:
> https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/seccomp-v5.1-rc8
has been merged into torvalds/linux.git:
https://git.kernel.org/torvalds/c/83a50840e72a5a964b4704fcdc2fbb2d771015ab
Thank you!
--
Deet-doot-dot, I am a bot.
https://korg.wiki.kernel.org/userdoc/prtracker
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2019-04-29 22:10 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2019-04-29 19:58 [GIT PULL] seccomp fixes for v5.1-rc8 Kees Cook
2019-04-29 22:10 ` pr-tracker-bot
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).