[4.19,0/1] Hardening against CVE-2023-2002

Message ID	20230530125731.253442-1-dragos.panait@windriver.com (mailing list archive)
Headers	show Return-Path: <linux-bluetooth-owner@vger.kernel.org> From: Dragos-Marian Panait <dragos.panait@windriver.com> To: stable@vger.kernel.org Cc: Ruihan Li <lrh2000@pku.edu.cn>, Marcel Holtmann <marcel@holtmann.org>, Luiz Augusto von Dentz <luiz.von.dentz@intel.com>, Johan Hedberg <johan.hedberg@gmail.com>, Paolo Abeni <pabeni@redhat.com>, "David S . Miller" <davem@davemloft.net>, Eric Dumazet <edumazet@google.com>, Jakub Kicinski <kuba@kernel.org>, netdev@vger.kernel.org, linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org Subject: [PATCH 4.19 0/1] Hardening against CVE-2023-2002 Date: Tue, 30 May 2023 15:57:30 +0300 Message-Id: <20230530125731.253442-1-dragos.panait@windriver.com> Content-Transfer-Encoding: 8bit Content-Type: text/plain MIME-Version: 1.0 Precedence: bulk
Series	Hardening against CVE-2023-2002 \| expand [4.19,0/1] Hardening against CVE-2023-2002 [4.19,1/1] bluetooth: Add cmd validity checks at the start of hci_sock_ioctl()

Message ID

20230530125731.253442-1-dragos.panait@windriver.com (mailing list archive)

Headers

From: Dragos-Marian Panait <dragos.panait@windriver.com>
To: stable@vger.kernel.org
Cc: Ruihan Li <lrh2000@pku.edu.cn>,
        Marcel Holtmann <marcel@holtmann.org>,
        Luiz Augusto von Dentz <luiz.von.dentz@intel.com>,
        Johan Hedberg <johan.hedberg@gmail.com>,
        Paolo Abeni <pabeni@redhat.com>,
        "David S . Miller" <davem@davemloft.net>,
        Eric Dumazet <edumazet@google.com>,
        Jakub Kicinski <kuba@kernel.org>, netdev@vger.kernel.org,
        linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org
Subject: [PATCH 4.19 0/1] Hardening against CVE-2023-2002
Date: Tue, 30 May 2023 15:57:30 +0300
Message-Id: <20230530125731.253442-1-dragos.panait@windriver.com>
Content-Transfer-Encoding: 8bit
Content-Type: text/plain
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: 
 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
X-OriginatorOrg: windriver.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 
 783c67c4-0848-470c-c996-08db610d761c
X-MS-Exchange-CrossTenant-AuthSource: PH0PR11MB4952.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 May 2023 12:57:45.1441
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 8ddb2873-a1ad-4a18-ae4e-4644631433be
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: 
 g+s/IaDMPmyDYJoLBLkr/x0+hgvupbz/i4EkaevPGRGScMf+Xcd0Si+toJnJ8Prl9LzwcwTwrtaJVO1YQ01raYQVoduOk+jCmg/Q2KV+s4U=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH8PR11MB6562
X-Proofpoint-GUID: M6BtJHeaN-yWPxTLY0RWB6aVAY85vSa-
X-Proofpoint-ORIG-GUID: M6BtJHeaN-yWPxTLY0RWB6aVAY85vSa-
X-Proofpoint-Virus-Version: vendor=baseguard
 engine=ICAP:2.0.254,Aquarius:18.0.957,Hydra:6.0.573,FMLib:17.11.176.26
 definitions=2023-05-30_09,2023-05-30_01,2023-05-22_02
X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0
 mlxlogscore=602 spamscore=0
 phishscore=0 bulkscore=0 priorityscore=1501 suspectscore=0 mlxscore=0
 malwarescore=0 lowpriorityscore=0 impostorscore=0 clxscore=1015
 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1
 engine=8.12.0-2304280000 definitions=main-2305300105
Precedence: bulk
List-ID: <linux-bluetooth.vger.kernel.org>
X-Mailing-List: linux-bluetooth@vger.kernel.org

Series

Hardening against CVE-2023-2002 | expand

Message

Dragos-Marian Panait May 30, 2023, 12:57 p.m. UTC

The following commit is needed to harden against CVE-2023-2002:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=000c2fa2c144c499c881a101819cf1936a1f7cf2

Ruihan Li (1):
  bluetooth: Add cmd validity checks at the start of hci_sock_ioctl()

 net/bluetooth/hci_sock.c | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)


base-commit: 3f57fb8b1bd06b277556601133823bec370d723f