Am 14.02.2011 11:54, schrieb Vasiliy Kulikov: > Struct tmp is copied from userspace. It is not checked whether the "name" > field is NULL terminated. This may lead to buffer overflow and passing > contents of kernel stack as a module name to try_then_request_module() and, > consequently, to modprobe commandline. It would be seen by all userspace > processes. > > Signed-off-by: Vasiliy Kulikov <segoon@xxxxxxxxxxxx> Applied, thanks Vasiliy. _______________________________________________ Bridge mailing list Bridge@xxxxxxxxxxxxxxxxxxxxxxxxxx https://lists.linux-foundation.org/mailman/listinfo/bridge
