]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
projects / thirdparty / kernel / stable.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e8d5dfd) | patch
netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()
authorPablo Neira Ayuso <pablo@netfilter.org>
Wed, 7 Sep 2022 08:26:18 +0000 (10:26 +0200)
committerFlorian Westphal <fw@strlen.de>
Wed, 7 Sep 2022 13:55:28 +0000 (15:55 +0200)
commit559c36c5a8d730c49ef805a72b213d3bba155cc8
treeed43b6765f451d17cb6fb2f85a98921a19fe6cdctree | snapshot
parente8d5dfd1d8747b56077d02664a8838c71ced948ecommit | diff
netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()

nf_osf_find() incorrectly returns true on mismatch, this leads to
copying uninitialized memory area in nft_osf which can be used to leak
stale kernel stack data to userspace.

Fixes: 22c7652cdaa8 ("netfilter: nft_osf: Add version option support")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Florian Westphal <fw@strlen.de>
net/netfilter/nfnetlink_osf.c diff | blob | blame | history
Mirror https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git