netdev - Re: [PATCH net 1/1] net: sched: fix ets qdisc OOB Indexing

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20250110155055.04ddaa2d@kernel.org>
Date: Fri, 10 Jan 2025 15:50:55 -0800
From: Jakub Kicinski <kuba@...nel.org>
To: Jamal Hadi Salim <jhs@...atatu.com>
Cc: netdev@...r.kernel.org, jiri@...nulli.us, xiyou.wangcong@...il.com,
 davem@...emloft.net, edumazet@...gle.com, petrm@...lanox.com,
 security@...nel.org
Subject: Re: [PATCH net 1/1] net: sched: fix ets qdisc OOB Indexing

On Fri, 10 Jan 2025 10:35:46 -0500 Jamal Hadi Salim wrote:
> Haowei Yan <g1042620637@...il.com> found that ets_class_from_arg() can
> index an Out-Of-Bound class in ets_class_from_arg() when passed clid of
> 0. The overflow may cause local privilege escalation.

ets_class_leaf() does not nul-check the result, which crashes 
the kernel during selftests.
-- 
pw-bot: cr