[6.1,0/1] Hardening against CVE-2023-2002

Message ID	20230530122629.231821-1-dragos.panait@windriver.com (mailing list archive)
Headers	show Return-Path: <linux-bluetooth-owner@vger.kernel.org> From: Dragos-Marian Panait <dragos.panait@windriver.com> To: stable@vger.kernel.org Cc: Ruihan Li <lrh2000@pku.edu.cn>, Marcel Holtmann <marcel@holtmann.org>, Luiz Augusto von Dentz <luiz.von.dentz@intel.com>, Johan Hedberg <johan.hedberg@gmail.com>, Paolo Abeni <pabeni@redhat.com>, "David S . Miller" <davem@davemloft.net>, Eric Dumazet <edumazet@google.com>, Jakub Kicinski <kuba@kernel.org>, netdev@vger.kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org Subject: [PATCH 6.1 0/1] Hardening against CVE-2023-2002 Date: Tue, 30 May 2023 15:26:28 +0300 Message-Id: <20230530122629.231821-1-dragos.panait@windriver.com> Content-Transfer-Encoding: 8bit Content-Type: text/plain MIME-Version: 1.0 Precedence: bulk
Series	Hardening against CVE-2023-2002 \| expand [6.1,0/1] Hardening against CVE-2023-2002 [6.1,1/1] bluetooth: Add cmd validity checks at the start of hci_sock_ioctl()

Message ID

20230530122629.231821-1-dragos.panait@windriver.com (mailing list archive)

Headers

From: Dragos-Marian Panait <dragos.panait@windriver.com>
To: stable@vger.kernel.org
Cc: Ruihan Li <lrh2000@pku.edu.cn>,
        Marcel Holtmann <marcel@holtmann.org>,
        Luiz Augusto von Dentz <luiz.von.dentz@intel.com>,
        Johan Hedberg <johan.hedberg@gmail.com>,
        Paolo Abeni <pabeni@redhat.com>,
        "David S . Miller" <davem@davemloft.net>,
        Eric Dumazet <edumazet@google.com>,
        Jakub Kicinski <kuba@kernel.org>, netdev@vger.kernel.org,
        linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org
Subject: [PATCH 6.1 0/1] Hardening against CVE-2023-2002
Date: Tue, 30 May 2023 15:26:28 +0300
Message-Id: <20230530122629.231821-1-dragos.panait@windriver.com>
Content-Transfer-Encoding: 8bit
Content-Type: text/plain
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: 
 BmSEU1JfMqIFVYv7xHoUJ4ua3aiu6hK+1wNxYDGYgw5Lh/YCvtTRTM5ymxl01rU7QTmBoU4iDuNvtG4BpC6cWGmp6lHOFaHuMVHhREVfsLS0HYoWm3+acyMYGJzkHUMi4jWK7w/nbHmRegYgeWZnM3MivN2SuoU1pO4bYv0afE1IadsMs0CGW9PKgVfSVYJZVbY1VdK7Aktfv5wAOlWSYad+80rm4aWwBrgDXKS324vmcNcKTcBuWqt4/I3uVnFKNekTEPK3fw071miSY/+YIRu7f1rJz64Y7Msb6NIZ/LyjMtFgyV9QCeZp7ERatnTQxQFExuSIlfhBz9kMuF1MGWHzMG9qZ1dcfR9M1/XVobrMitDyL2gTTYmo7HzvzeHfFG1tsXQLthGEp0C/WxOYJ3iSmMI3r8bx9ZIk667IXwVBR3ehP90J8yV4KOGePZaEN0+z9qEjjCmVuy7yADEV5tSa8TABfKj7N1G+QVLiRbQxHB2N2an9se69YTpJotTRPB4TVDNscMzJF9mgBS74w8nQWkBjBaxayo53TuHyI2Np3jMIqW7Pa0XqCE0Kf0aFrKnPfUJkFCfRKAj3UP94Rg9leAFKjQJEJBspXxbRXQkJelDD4JTalhku5P0c/nVzgODftqVhUPsoG+kACdKPqHE9fDSnGwkEel/I7rLI43Fdbf5iscF6XUGWX/QWEUrc58RDVuIhewKy1AtobJwbS3y3CymXV9wOfDbj2sZmwYMRBBCAZeV/JmKWj3umPK9//+HIo9fTPYiHlL2bTqIcYLpwhQZw95QK365tFPtnYN0aim3rzSBriL7mTGEoRl+Lef49O6bIWLZVe/pn0EXc5W9yivsQ38YlJJ0P4ZvdtNGzMBD0GyDCNC8j5KISid3364Tz8DBwtwIRjWtg8MEWX1d3IByxAEVRLcpEj/AGiiqbs2kjkfFn3/VdvL/cgctwoXu+pvJ4Nv8KOeGr3Pdda8ve6yfB0tn/QLZYgNVdBGBQC2M5oMZp2ApIe54ur4BuIGHe9jC3dGSXCCrn8s4OFn3kgfWY+F2QtCPFYSy8pG7oDQH3QkrbZSbA2XCF04QP3w7XsyX7KI2J4pxYWTUebRsYNw+j47Y+tYfNCAWouoSRMSYuToTSlt5MDSXGoQkb13pcHVLAXspB77MPS52iYugP5XSDf5MPg0hDhHqHkqayzDWu0ZlozbaYe7jhLLGFL4lcl/33QAlZl5Ij9vK1qM4aQidw2y6Y5piNxUMXwOyX0WQhmdukkzSz5SJP37KQJGgendEl/QUyIYI5N2vxGZF5JbiC7Z8eHmrVS2OGcIkPHl2hjcEHzd/wn2KDAgUAOlvaKaYRY9cqvKFabd5/5an7q6cYAb1PQsh8hpqW1bE+MxZyO5HhOwwFCfV+w7dvQAbGcH0o1OLV2okC/qirFCVjMl6dLnk6HfmloiNjT4MN/vXB503U/pJUHrkiPWfi7lQhqsxcrBwwfPvMJ4tYccbdxVhGdDVmOViW0TeIvId1rhPzK4X/NCXXb5K1klM6fQubMNXxoT7mDl5GNLZUUZ7P9VhtqgGsPpGIrFCQF3m+ytznt+8dtLz1zCcuWZGNDJM22JlWL3qXAf9aKZM0Xg==
X-OriginatorOrg: windriver.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 
 e284f056-8936-4b09-c961-08db610921b0
X-MS-Exchange-CrossTenant-AuthSource: PH0PR11MB4952.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 May 2023 12:26:45.4691
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 8ddb2873-a1ad-4a18-ae4e-4644631433be
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: 
 vb5W2dWT6sXWPoJqhLoXXRSk7pxL/ozBPLm/7Ez6w5x5HLN9jhSdLMuVoHY8mYEEKWqlg+lJIiSIouhAVbdCm7yzHvK5ppwwmf9WQlAu/tY=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS0PR11MB7336
X-Proofpoint-GUID: 2_keXzumSba5HSmOg_9OLXOzw-hpYiK4
X-Proofpoint-ORIG-GUID: 2_keXzumSba5HSmOg_9OLXOzw-hpYiK4
X-Proofpoint-Virus-Version: vendor=baseguard
 engine=ICAP:2.0.254,Aquarius:18.0.957,Hydra:6.0.573,FMLib:17.11.176.26
 definitions=2023-05-30_08,2023-05-30_01,2023-05-22_02
X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0
 mlxlogscore=602 spamscore=0
 phishscore=0 bulkscore=0 priorityscore=1501 suspectscore=0 mlxscore=0
 malwarescore=0 lowpriorityscore=0 impostorscore=0 clxscore=1011
 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1
 engine=8.12.0-2304280000 definitions=main-2305300103
Precedence: bulk
List-ID: <linux-bluetooth.vger.kernel.org>
X-Mailing-List: linux-bluetooth@vger.kernel.org

Series

Hardening against CVE-2023-2002 | expand

Message

Dragos-Marian Panait May 30, 2023, 12:26 p.m. UTC

The following commit is needed to harden against CVE-2023-2002:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=000c2fa2c144c499c881a101819cf1936a1f7cf2

Ruihan Li (1):
  bluetooth: Add cmd validity checks at the start of hci_sock_ioctl()

 net/bluetooth/hci_sock.c | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)


base-commit: fa74641fb6b93a19ccb50579886ecc98320230f9