diff options
| author | Nguyen Duy Nhat Anh <neganhat@gmail.com> | 2026-09-17 11:45:58 +0700 |
|---|---|---|
| committer | Tyler Hicks <code@tyhicks.com> | 2026-10-12 23:11:02 -0500 |
| commit | 5b00bf0f3b7ad05eff79b84e3bacf3f98ac67dc6 (patch) | |
| tree | cb7e025c8c14632c97aca100c014f9a5a46f92e3 /tools/lib/python | |
| parent | 72d3fcf802c45d00b300f25b848a93c3a2bd7c7e (diff) | |
| download | linux-next-5b00bf0f3b7ad05eff79b84e3bacf3f98ac67dc6.tar.gz linux-next-5b00bf0f3b7ad05eff79b84e3bacf3f98ac67dc6.zip | |
fs/ecryptfs: fix slab-out-of-bounds read in ecryptfs_verify_auth_tok_from_key
Add a bounds check in ecryptfs_get_key_payload_data() to ensure the
key payload datalen is at least sizeof(struct ecryptfs_auth_tok) before
returning the pointer. This prevents out-of-bounds reads when userspace
supplies a short payload via add_key().
Fixes: 237fead61998 ("[PATCH] ecryptfs: fs/Makefile and fs/Kconfig")
Cc: stable@vger.kernel.org
Reported-by: syzbot+b9529ebe6a9394ddf825@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=b9529ebe6a9394ddf825
Reported-by: syzbot+e4391e0d6e7c89b8c84e@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=e4391e0d6e7c89b8c84e
Reported-by: syzbot+dc50906b100ac7a1c34d@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=dc50906b100ac7a1c34d
Signed-off-by: Nguyen Duy Nhat Anh <neganhat@gmail.com>
Signed-off-by: Tyler Hicks <code@tyhicks.com>
Diffstat (limited to 'tools/lib/python')
0 files changed, 0 insertions, 0 deletions