FAILED: patch "[PATCH] net: socket: Fix potential spectre v1 gadget in" failed to apply to 4.14-stable tree
Subsystems (3)
[email protected]
maintainerThe patch below does not apply to the 4.14-stable tree.
If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <[email protected]>.
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
Quoted 1 line
From
e978de7a6d382ec378830ca2cf38e902df0b6d84Mon Sep 17 00:00:00 2001
From: Jeremy Cline <[email protected]>
Date: Fri, 27 Jul 2018 22:43:02 +0000
Subject: [PATCH] net: socket: Fix potential spectre v1 gadget in
sock_is_registered
'family' can be a user-controlled value, so sanitize it after the bounds check to avoid speculative out-of-bounds access.
Cc Josh Poimboeuf <[email protected]>
Signed-off-by Jeremy Cline <[email protected]>
Signed-off-by David S. Miller <[email protected]>
net/socket.c +2 -1
@@ -2690,7 +2690,8 @@ EXPORT_SYMBOL(sock_unregister);bool sock_is_registered (int family) { -return family <NPROTO &&rcu_access_pointer (net_families[family]); +return family <NPROTO && +rcu_access_pointer (net_families[array_index_nospec (family,NPROTO )]); }static int __init sock_init (void )