lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <CAHC9VhR3vzLkso4kiqKoA4nyZJeD9S8jTE7yZiVMeWfL-acPrg@mail.gmail.com>
Date:   Tue, 31 Jul 2018 16:03:25 -0400
From:   Paul Moore <paul@...l-moore.com>
To:     Linus Torvalds <torvalds@...ux-foundation.org>
Cc:     linux-audit@...hat.com, linux-kernel@...r.kernel.org,
        wang.yi59@....com.cn
Subject: [GIT PULL] Audit fixes for v4.18 (#1)

Hi Linus,

A single small audit fix to guard against memory allocation failures
when logging information about a kernel module load.  It's small, easy
to understand, and self-contained; while nothing is zero risk, this
should be pretty low.

Please merge for v4.18, thanks.
-Paul

--
The following changes since commit 5b71388663c0920848c0ee7de946970a2692b76d:

 audit: Fix wrong task in comparison of session ID (2018-05-21 14:27:43 -0400)

are available in the Git repository at:

 git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit.git
   tags/audit-pr-20180731

for you to fetch changes up to b305f7ed0f4f494ad6f3ef5667501535d5a8fa31:

 audit: fix potential null dereference 'context->module.name'
   (2018-07-30 18:09:37 -0400)

----------------------------------------------------------------
audit/stable-4.18 PR 20180731

----------------------------------------------------------------
Yi Wang (1):
     audit: fix potential null dereference 'context->module.name'

kernel/auditsc.c | 13 +++++++++----
1 file changed, 9 insertions(+), 4 deletions(-)

-- 
paul moore
www.paul-moore.com

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ