Return-Path: Date: Tue, 24 Jun 2014 14:01:38 -0400 From: Benjamin LaHaise To: Linus Torvalds , security@kernel.org Cc: linux-aio@kvack.org, linux-kernel@vger.kernel.org, Mateusz Guzik , Petr Matousek , Kent Overstreet , Jeff Moyer , stable@vger.kernel.org Subject: [PATCH 0/2] aio: fixes for kernel memory disclosure in aio read events Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Sender: linux-kernel-owner@vger.kernel.org List-ID: Please pull the following 2 fixes from my aio-fixes git tree at git://git.kvack.org/~bcrl/aio-fixes.git . These fix a kernel memory disclosure issue (arbitrary kmap() & copy_to_user()) revealed in CVE-2014-0206 by changes that were introduced in v3.10. Benjamin LaHaise (2): aio: fix aio request leak when events are reaped by userspace aio: fix kernel memory disclosure in io_getevents() introduced in v3.10 fs/aio.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) -- 1.8.2.1 -- "Thought is the essence of where you are now."