Skip to contentSkip to conversation

Patch "drivers/ptp: Fix kernel memory disclosure" has been added to the 4.8-stable tree

PATCH [email protected] 1 participant 1 message Nov 10, 2016

Subsystems (3)
lore
Share & tools
lore

[email protected]

author maintainer Applied
#0 lore raw

This is a note to let you know that I've just added the patch titled

drivers/ptp: Fix kernel memory disclosure

to the 4.8-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary

The filename of the patch is:
drivers-ptp-fix-kernel-memory-disclosure.patch
and it can be found in the queue-4.8 subdirectory.

If you, or anyone else, feels it should not be added to the stable tree, please let <[email protected]> know about it.

Quoted 1 line

From foo@baz Thu Nov 10 16:43:03 CET 2016

From: Vlad Tsyrklevich <[email protected]>
Date: Tue, 11 Oct 2016 15:02:47 +0200
Subject: drivers/ptp: Fix kernel memory disclosure

From: Vlad Tsyrklevich <[email protected]>

[ Upstream commit 02a9079c66341836c4914c33c06a73245060df2e ]

The reserved field precise_offset->rsv is not cleared before being copied to user space, leaking kernel stack memory. Clear the struct before it's copied.

---
 drivers/ptp/ptp_chardev.c |    1 +
 1 file changed, 1 insertion(+)
drivers/ptp/ptp_chardev.c +1 -0
@@ -193,6 +193,7 @@ long ptp_ioctl(struct posix_clock *pc, u
 		if (err)
 			break;
 
+		memset(&precise_offset, 0, sizeof(precise_offset));
 		ts = ktime_to_timespec64(xtstamp.device);
 		precise_offset.device.sec = ts.tv_sec;
 		precise_offset.device.nsec = ts.tv_nsec;

Patches currently in stable-queue which might be from [email protected] are

queue-4.8/drivers-ptp-fix-kernel-memory-disclosure.patch