Gustavo A. R. Silva
acf784bd0c
net: atm: Fix potential Spectre v1
...
ioc_data.dev_num can be controlled by user-space, hence leading to
a potential exploitation of the Spectre variant 1 vulnerability.
This issue was detected with the help of Smatch:
net/atm/lec.c:702 lec_vcc_attach() warn: potential spectre issue
'dev_lec'
Fix this by sanitizing ioc_data.dev_num before using it to index
dev_lec. Also, notice that there is another instance in which array
dev_lec is being indexed using ioc_data.dev_num at line 705:
lec_vcc_added(netdev_priv(dev_lec[ioc_data.dev_num]),
Notice that given that speculation windows are large, the policy is
to kill the speculation on the first load and not worry if it can be
completed with a dependent load/store [1].
[1] https://marc.info/?l=linux-kernel&m=152449131114778&w=2
Cc: stable@vger.kernel.org
Signed-off-by: Gustavo A. R. Silva <gustavo@embeddedor.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2018-05-04 12:52:47 -04:00
..
addr.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
addr.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
atm_misc.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
atm_sysfs.c
net: Use octal not symbolic permissions
2018-03-26 12:07:48 -04:00
br2684.c
net: delete /proc THIS_MODULE references
2018-01-16 15:01:33 -05:00
clip.c
net: Use octal not symbolic permissions
2018-03-26 12:07:48 -04:00
common.c
vfs: do bulk POLL* -> EPOLL* replacement
2018-02-11 14:34:03 -08:00
common.h
net: annotate ->poll() instances
2017-11-27 16:20:04 -05:00
ioctl.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
Kconfig
lec.c
net: atm: Fix potential Spectre v1
2018-05-04 12:52:47 -04:00
lec.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
lec_arpc.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
Makefile
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
mpc.c
atm: mpoa: remove 32-bit timekeeping
2017-11-30 09:26:32 -05:00
mpc.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
mpoa_caches.c
atm: mpoa: remove 32-bit timekeeping
2017-11-30 09:26:32 -05:00
mpoa_caches.h
atm: mpoa: remove 32-bit timekeeping
2017-11-30 09:26:32 -05:00
mpoa_proc.c
net: delete /proc THIS_MODULE references
2018-01-16 15:01:33 -05:00
pppoatm.c
proc.c
net: Use octal not symbolic permissions
2018-03-26 12:07:48 -04:00
protocols.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
pvc.c
net: make getname() functions return length rather than use int* parameter
2018-02-12 14:15:04 -05:00
raw.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
resources.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
resources.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
signaling.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
signaling.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
svc.c
net: make getname() functions return length rather than use int* parameter
2018-02-12 14:15:04 -05:00