]> git.proxmox.com Git - mirror_ubuntu-focal-kernel.git/commit
scsi: iscsi: Verify lengths on passthrough PDUs
authorChris Leech <cleech@redhat.com>
Thu, 11 Mar 2021 02:36:14 +0000 (23:36 -0300)
committerKleber Sacilotto de Souza <kleber.souza@canonical.com>
Tue, 16 Mar 2021 11:28:33 +0000 (12:28 +0100)
commit0a104c3a8e9712a6fa2db3507ea510120ed8217a
tree3ca4912dc8433c3ff371f42f92e8916a828cb010
parentb8080e49feb94a187efe3d2a786f4ebc268c8041
scsi: iscsi: Verify lengths on passthrough PDUs

Open-iSCSI sends passthrough PDUs over netlink, but the kernel should be
verifying that the provided PDU header and data lengths fall within the
netlink message to prevent accessing beyond that in memory.

Cc: stable@vger.kernel.org
Reported-by: Adam Nichols <adam@grimm-co.com>
Reviewed-by: Lee Duncan <lduncan@suse.com>
Reviewed-by: Mike Christie <michael.christie@oracle.com>
Signed-off-by: Chris Leech <cleech@redhat.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
(cherry picked from commit f9dbdf97a5bd92b1a49cee3d591b55b11fd7a6d5)
CVE-2021-27365
Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>
Acked-by: Stefan Bader <stefan.bader@canonical.com>
Acked-by: Tim Gardner <tim.gardner@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>
drivers/scsi/scsi_transport_iscsi.c