diff options
| author | Vincenzo Maffione <vmaffione@FreeBSD.org> | 2022-03-16 06:57:54 +0000 |
|---|---|---|
| committer | Vincenzo Maffione <vmaffione@FreeBSD.org> | 2022-03-19 17:36:27 +0000 |
| commit | 9df8dd3ea36c8b3abe8fc182647472ca9cd83efd (patch) | |
| tree | c443d12905376ffac90b7be08b942a108626ed4f /sys/dev/netmap/netmap_bdg.h | |
| parent | eeec49e0b30a3faf2985e27f163a4c2f7b511e7c (diff) | |
netmap: Fix integer overflow in nmreq_copyin
An unsanitized field in an option could be abused, causing an integer
overflow followed by kernel memory corruption. This might be used
to escape jails/containers.
Reported by: Reno Robert and Lucas Leong (@_wmliang_) of Trend Micro
Zero Day Initiative
Security: CVE-2022-23085
(cherry picked from commit 694ea59c7021c25417e6d516362d2f59b4e2c343)
Diffstat (limited to 'sys/dev/netmap/netmap_bdg.h')
0 files changed, 0 insertions, 0 deletions