Kangjie Lu 44efbfab13 net: fix infoleak in llc ...

commit b8670c09f37bdf2847cc44f36511a53afc6161fd upstream.

The stack object “info” has a total size of 12 bytes. Its last byte
is padding which is not initialized and leaked via “put_cmsg”.

Signed-off-by: Kangjie Lu <kjlu@gatech.edu>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Willy Tarreau <w@1wt.eu>

2016-06-07 10:42:54 +02:00

..

9p

9p: forgetting to cancel request on interrupted zero-copy RPC

2015-08-03 09:29:47 -07:00

802

…

8021q

…

appletalk

…

atm

…

ax25

net: add validation for the socket syscall protocol argument

2016-01-22 19:47:55 -08:00

batman-adv

batman-adv: Fix broadcast/ogm queue limit on a removed interface

2016-06-07 10:42:53 +02:00

bluetooth

bluetooth: Validate socket address length in sco_sock_bind().

2016-01-22 19:47:55 -08:00

bridge

bridge: Only call /sbin/bridge-stp for the initial network namespace

2016-01-28 21:49:34 -08:00

caif

unix/caif: sk_socket can disappear when state is unlocked

2015-06-22 16:55:51 -07:00

can

can: add missing initialisations in CAN related skbuffs

2015-03-26 15:00:58 +01:00

ceph

libceph: don't bail early from try_read() when skipping a message

2016-03-03 15:06:24 -08:00

core

unix: correctly track in-flight fds in sending process user_struct

2016-03-03 15:06:20 -08:00

dcb

…

dccp

…

decnet

decnet: Do not build routes to devices without decnet private data.

2016-06-07 10:42:54 +02:00

dns_resolver

…

dsa

…

ethernet

…

ieee802154

…

ipv4

route: do not cache fib route info on local routes with oif

2016-06-07 10:42:54 +02:00

ipv6

ip6_tunnel: set rtnl_link_ops before calling register_netdevice

2016-06-07 10:42:50 +02:00

ipx

ipx: fix locking regression in ipx_sendmsg and ipx_recvmsg

2014-12-06 15:05:47 -08:00

irda

net: add validation for the socket syscall protocol argument

2016-01-22 19:47:55 -08:00

iucv

…

key

…

l2tp

ipv6: l2tp: fix a potential issue in l2tp_ip6_recv

2016-06-07 10:42:50 +02:00

lapb

…

llc

net: fix infoleak in llc

2016-06-07 10:42:54 +02:00

mac80211

mac80211: minstrel_ht: set default tx aggregation timeout to 0

2016-03-16 08:41:36 -07:00

mac802154

…

netfilter

ipvs: correct initial offset of Call-ID header search in SIP persistence engine

2016-06-07 10:42:52 +02:00

netlabel

…

netlink

netlink: don't hold mutex in rcu callback when releasing mmapd ring

2015-10-01 12:07:37 +02:00

netrom

…

nfc

…

openvswitch

…

packet

packet: fix heap info leak in PACKET_DIAG_MCLIST sock_diag interface

2016-06-07 10:42:54 +02:00

phonet

phonet: properly unshare skbs in phonet_rcv()

2016-01-28 21:49:34 -08:00

rds

RDS: fix race condition when sending a message on unbound socket

2016-03-03 15:06:21 -08:00

rfkill

rfkill: fix rfkill_fop_read wait_event usage

2016-03-03 15:06:24 -08:00

rose

…

rxrpc

rxrpc: bogus MSG_PEEK test in rxrpc_recvmsg()

2015-03-26 15:00:56 +01:00

sched

net_sched: invoke ->attach() after setting dev->qdisc

2015-06-22 16:55:51 -07:00

sctp

sctp: lack the check for ports in sctp_v6_cmp_addr

2016-06-07 10:42:48 +02:00

sunrpc

sunrpc/cache: fix off-by-one in qword_get()

2016-03-03 15:06:24 -08:00

tipc

net/tipc: initialize security state for new connection socket

2015-10-01 12:07:35 +02:00

unix

unix: correctly track in-flight fds in sending process user_struct

2016-03-03 15:06:20 -08:00

vmw_vsock

…

wimax

…

wireless

nl80211: check netlink protocol in socket release notification

2016-06-07 10:42:51 +02:00

x25

…

xfrm

…

compat.c

net: compat: Update get_compat_msghdr() to match copy_msghdr_from_user() behaviour

2015-03-26 15:00:56 +01:00

Kconfig

…

Makefile

…

nonet.c

…

socket.c

net: Fix use after free in the recvmmsg exit path

2016-06-07 10:42:49 +02:00

sysctl_net.c

…