diff options
| author | Vincenzo Maffione <vmaffione@FreeBSD.org> | 2022-04-05 23:26:02 +0000 |
|---|---|---|
| committer | Ed Maste <emaste@FreeBSD.org> | 2022-04-05 23:26:02 +0000 |
| commit | 00ca345e83ada8b68e302f5406f9799209872c90 (patch) | |
| tree | be40643fcbe6c4d8c96c98b450b6d59db77d1245 /sys/dev/netmap/netmap_kloop.c | |
| parent | 5b789e0c92a7c363b36111b1f75519f2acd21f97 (diff) | |
netmap: Fix integer overflow in nmreq_copyin
An unsanitized field in an option could be abused, causing an integer
overflow followed by kernel memory corruption. This might be used
to escape jails/containers.
Reported by: Reno Robert and Lucas Leong (@_wmliang_) of Trend Micro
Zero Day Initiative
Security: CVE-2022-23085
(cherry picked from commit 694ea59c7021c25417e6d516362d2f59b4e2c343)
(cherry picked from commit 9df8dd3ea36c8b3abe8fc182647472ca9cd83efd)
Approved by: so
Security: FreeBSD-SA-22:04.netmap
Diffstat (limited to 'sys/dev/netmap/netmap_kloop.c')
0 files changed, 0 insertions, 0 deletions