blob: c997c5e623fe92cb70599c9a375f42b14bfdfa8d (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
|
Description: tipc: fix size validations for the MSG_CRYPTO type
References:
https://www.sentinelone.com/labs/tipc-remote-linux-kernel-heap-overflow-allows-arbitrary-code-execution/
Notes:
carnil> Commit fixes 1ef6f7c9390f ("tipc: add automatic session key
carnil> exchange") in 5.10-rc1.
Bugs:
upstream: released (5.15) [fa40d9734a57bcbfa79a280189799f76c88f7bb0]
5.10-upstream-stable: released (5.10.77) [0b1b3e086b0af2c2faa9938c4db956fe6ce5c965]
4.19-upstream-stable: N/A "Vulnerable code introduced later"
4.9-upstream-stable: N/A "Vulnerable code introduced later"
sid: released (5.14.16-1)
5.10-bullseye-security: released (5.10.84-1)
4.19-buster-security: N/A "Vulnerable code introduced later"
4.9-stretch-security: N/A "Vulnerable code introduced later"
|
