On Mon, Nov 27, 2023 at 06:37:45PM +0000, Hagar Gamal Halim Hemdan wrote: > Coverity spotted that event_msg is controlled by user-space, > event_msg->event_data.event is passed to event_deliver() and used > as an index without sanitization. > > This change ensures that the event index is sanitized to mitigate any > possibility of speculative information leaks. > > Fixes: 1d990201f9bb ("VMCI: event handling implementation") > > Signed-off-by: Hagar Gamal Halim Hemdan <hagarhem@xxxxxxxxxx> > --- > drivers/misc/vmw_vmci/vmci_event.c | 6 +++++- : 1 file changed, 5 insertions(+), 1 deletion(-) <formletter> This is not the correct way to submit patches for inclusion in the stable kernel tree. Please read: https://www.kernel.org/doc/html/latest/process/stable-kernel-rules.html for how to do this properly. </formletter>