APPLIED[artful]: [PATCH 1/1] net: Zeroing the structure ethtool_wolinfo in ethtool_get_wol()
Seth Forshee
seth.forshee at canonical.com
Thu Jun 8 16:28:42 UTC 2017
On Thu, Jun 08, 2017 at 06:41:15AM -0700, Brad Figg wrote:
> From: Avijit Kanti Das <avijitnsec at codeaurora.org>
>
> CVE-2014-9900
>
> memset() the structure ethtool_wolinfo that has padded bytes
> but the padded bytes have not been zeroed out.
>
> Change-Id: If3fd2d872a1b1ab9521d937b86a29fc468a8bbfe
> Signed-off-by: Avijit Kanti Das <avijitnsec at codeaurora.org>
> Signed-off-by: Brad Figg <brad.figg at canonical.com>
Applied to artful/master-next and unstable/master with the subject
"UBUNTU: SAUCE: (no-up) net: Zeroing the structure ethtool_wolinfo in
ethtool_get_wol()."
More information about the kernel-team
mailing list