]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/commit
isdn: Disable IIOCDBGVAR
authorKees Cook <keescook@chromium.org>
Wed, 15 Aug 2018 19:14:05 +0000 (12:14 -0700)
committerJuerg Haefliger <juergh@canonical.com>
Wed, 24 Jul 2019 01:42:22 +0000 (19:42 -0600)
commitf975b14b7ce0cf180848a36c2a47b62d82619023
treea398b2d2ca138ddd095da9ece2929f4eef4e4bab
parent4575e439c5bd67096861545c170ba29bfca80559
isdn: Disable IIOCDBGVAR

BugLink: https://bugs.launchpad.net/bugs/1835845
[ Upstream commit 5e22002aa8809e2efab2da95855f73f63e14a36c ]

It was possible to directly leak the kernel address where the isdn_dev
structure pointer was stored. This is a kernel ASLR bypass for anyone
with access to the ioctl. The code had been present since the beginning
of git history, though this shouldn't ever be needed for normal operation,
therefore remove it.

Reported-by: Al Viro <viro@zeniv.linux.org.uk>
Cc: Karsten Keil <isdn@linux-pingi.de>
Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Kamal Mostafa <kamal@canonical.com>
Signed-off-by: Khalid Elmously <khalid.elmously@canonical.com>
drivers/isdn/i4l/isdn_common.c