Patch "nl80211: Check for the required netlink attribute presence" has been added to the 4.14-stable tree
Subsystems (2)
This is a note to let you know that I've just added the patch titled
nl80211: Check for the required netlink attribute presence
to the 4.14-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
nl80211-check-for-the-required-netlink-attribute-presence.patch
and it can be found in the queue-4.14 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree, please let <[email protected]> know about it.
Quoted 1 line
From foo@baz Wed Feb 28 16:23:28 CET 2018
From: Hao Chen <[email protected]>
Date: Wed, 3 Jan 2018 11:00:31 +0800
Subject: nl80211: Check for the required netlink attribute presence
From: Hao Chen <[email protected]>
[ Upstream commit 3ea15452ee85754f70f3b9fa1f23165ef2e77ba7 ]
nl80211_nan_add_func() does not check if the required attribute NL80211_NAN_FUNC_FOLLOW_UP_DEST is present when processing NL80211_CMD_ADD_NAN_FUNCTION request. This request can be issued by users with CAP_NET_ADMIN privilege and may result in NULL dereference and a system crash. Add a check for the required attribute presence.
--- net/wireless/nl80211.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-)
net/wireless/nl80211.c +2 -1
@@ -11301,7 +11301,8 @@ static int nl80211_nan_add_func(struct sbreak ;case NL80211_NAN_FUNC_FOLLOW_UP :if (!tb[NL80211_NAN_FUNC_FOLLOW_UP_ID ] || - !tb[NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID ]) { + !tb[NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID ] || + !tb[NL80211_NAN_FUNC_FOLLOW_UP_DEST ]) { err = -EINVAL ; goto out; }
Patches currently in stable-queue which might be from [email protected] are
queue-4.14/nl80211-check-for-the-required-netlink-attribute-presence.patch