APPLIED [OEM-5.14/OEM-5.17/OEM-6.0] Re: [UBUNTU oem-5.14, jammy, oem-5.17, kinetic, oem-6.0, unstable 0/2] CVE-2022-4378

[Timo Aaltonen]

Thadeu Lima de Souza Cascardo kirjoitti 12.12.2022 klo 23.05:
> [Impact]
> Unprivileged user could cause stack overflow when writing too many
> whitespaces on a sysctl file. Using user/network namespaces make it possible
> for unprivileged users.
> 
> [Testing]
> A simple script was used to test it. The fix worked on the tested 5.14, 5.15,
> 5.19 and 6.1 kernels.
> 
> [Potential regression]
> Writing to sysctl files may fail or parse incorrectly.
> 
> Linus Torvalds (2):
>    proc: proc_skip_spaces() shouldn't think it is working on C strings
>    proc: avoid integer type confusion in get_proc_long
> 
>   kernel/sysctl.c | 30 +++++++++++++++---------------
>   1 file changed, 15 insertions(+), 15 deletions(-)
> 

applied to oem-kernels, thanks



-- 
t