Re: [PATCH] vmci: prevent speculation leaks by sanitizing event in event_deliver()

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Nov 27, 2023 at 06:37:45PM +0000, Hagar Gamal Halim Hemdan wrote:
> Coverity spotted that event_msg is controlled by user-space,
> event_msg->event_data.event is passed to event_deliver() and used
> as an index without sanitization.
> 
> This change ensures that the event index is sanitized to mitigate any
> possibility of speculative information leaks.
> 
> Fixes: 1d990201f9bb ("VMCI: event handling implementation")
> 
> Signed-off-by: Hagar Gamal Halim Hemdan <hagarhem@xxxxxxxxxx>
> ---
>  drivers/misc/vmw_vmci/vmci_event.c | 6 +++++-
:  1 file changed, 5 insertions(+), 1 deletion(-)

<formletter>

This is not the correct way to submit patches for inclusion in the
stable kernel tree.  Please read:
    https://www.kernel.org/doc/html/latest/process/stable-kernel-rules.html
for how to do this properly.

</formletter>




[Index of Archives]     [Linux Kernel]     [Kernel Development Newbies]     [Linux USB Devel]     [Video for Linux]     [Linux Audio Users]     [Yosemite Hiking]     [Linux Kernel]     [Linux SCSI]

  Powered by Linux