]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
safesetid: check size of policy writes
authorLeo Stone <leocstone@gmail.com>
Tue, 17 Dec 2024 18:26:57 +0000 (10:26 -0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 21 Feb 2025 12:49:31 +0000 (13:49 +0100)
commita0dec65f88c8d9290dfa1d2ca1e897abe54c5881
tree3f252b525e7f70bde6950567d17986cae8e59e56
parent505899fb11ab6e6fd43f62734da79d4656815829
safesetid: check size of policy writes

[ Upstream commit f09ff307c7299392f1c88f763299e24bc99811c7 ]

syzbot attempts to write a buffer with a large size to a sysfs entry
with writes handled by handle_policy_update(), triggering a warning
in kmalloc.

Check the size specified for write buffers before allocating.

Reported-by: syzbot+4eb7a741b3216020043a@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=4eb7a741b3216020043a
Signed-off-by: Leo Stone <leocstone@gmail.com>
[PM: subject tweak]
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
security/safesetid/securityfs.c