]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
safesetid: check size of policy writes
authorLeo Stone <leocstone@gmail.com>
Tue, 17 Dec 2024 18:26:57 +0000 (10:26 -0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 13 Mar 2025 11:50:17 +0000 (12:50 +0100)
commitecf6a4a558097920447a6fb84dfdb279e2ac749a
tree34e77afb94212d6d0aca6161bfaf2b1cda559f35
parentbb8ff054e19fe27f4e5eaac1b05e462894cfe9b1
safesetid: check size of policy writes

[ Upstream commit f09ff307c7299392f1c88f763299e24bc99811c7 ]

syzbot attempts to write a buffer with a large size to a sysfs entry
with writes handled by handle_policy_update(), triggering a warning
in kmalloc.

Check the size specified for write buffers before allocating.

Reported-by: syzbot+4eb7a741b3216020043a@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=4eb7a741b3216020043a
Signed-off-by: Leo Stone <leocstone@gmail.com>
[PM: subject tweak]
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
security/safesetid/securityfs.c