[Trusty][SRU][PATCH 0/1] Fix for CVE-2017-15868
po-hsu.lin at canonical.com
Wed Dec 13 04:24:06 UTC 2017
Only Trusty needs this patch.
The original commit message is not very clear,
it's referring to commit 96c26653:
Bluetooth: cmtp: cmtp_add_connection() should verify that it's dealing with l2cap socket
... rather than relying on ciptool(8) never passing it anything else. Give
it e.g. an AF_UNIX connected socket (from socketpair(2)) and it'll oops,
trying to evaluate &l2cap_pi(sock->sk)->chan->dst...
Kernel successfully built with this patch.
Al Viro (1):
Bluetooth: bnep: bnep_add_connection() should verify that it's dealing
with l2cap socket
net/bluetooth/bnep/core.c | 3 +++
1 file changed, 3 insertions(+)
More information about the kernel-team