linux-kernel - [GIT PULL] tee driver fixes for v4.17

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20180507124731.GA21011@jax.urgonet>
Date:   Mon, 7 May 2018 14:47:31 +0200
From:   Jens Wiklander <jens.wiklander@...aro.org>
To:     arm-soc <arm@...nel.org>
Cc:     Linux Kernel Mailing List <linux-kernel@...r.kernel.org>,
        Linux ARM <linux-arm-kernel@...ts.infradead.org>
Subject: [GIT PULL] tee driver fixes for v4.17

Hello arm-soc maintainers,

Please pull these tee driver fixes. Of particular interest is a fix for a
use-after-free issue. There's also a fix making sure that memory references
are kept within the used shm object.

Thanks,
Jens

The following changes since commit 75bc37fefc4471e718ba8e651aa74673d4e0a9eb:

  Linux 4.17-rc4 (2018-05-06 16:57:38 -1000)

are available in the Git repository at:

  git://git.linaro.org/people/jens.wiklander/linux-tee.git/ tags/tee-drv-fixes-for-4.17

for you to fetch changes up to ab9d3db5b320a052452b9cd035599ee3c84bbee9:

  tee: check shm references are consistent in offset/size (2018-05-07 11:51:03 +0200)

----------------------------------------------------------------
Small fixes for tee subsystem

* Fixes for use-after-free via temporarily dropped reference
* Checks that passed shm references are consistent in offset/size
  with regards to the shm object

----------------------------------------------------------------
Etienne Carriere (1):
      tee: check shm references are consistent in offset/size

Jann Horn (1):
      tee: shm: fix use-after-free via temporarily dropped reference

 drivers/tee/tee_core.c | 11 +++++++++++
 drivers/tee/tee_shm.c  |  5 +++--
 2 files changed, 14 insertions(+), 2 deletions(-)