Dave Weinstein 0107ea0e09 arm: oabi compat: add missing access checks ...

commit 7de249964f5578e67b99699c5f0b405738d820a2 upstream.

Add access checks to sys_oabi_epoll_wait() and sys_oabi_semtimedop().
This fixes CVE-2016-3857, a local privilege escalation under
CONFIG_OABI_COMPAT.

Reported-by: Chiachih Wu <wuchiachih@gmail.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
Reviewed-by: Nicolas Pitre <nico@linaro.org>
Signed-off-by: Dave Weinstein <olorin@google.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2016-08-16 09:30:48 +02:00

..

alpha

mm: mlock: add mlock flags to enable VM_LOCKONFAULT usage

2015-11-05 19:34:48 -08:00

arc

ARC: unwind: ensure that .debug_frame is generated (vs. .eh_frame)

2016-08-10 11:49:25 +02:00

arm

arm: oabi compat: add missing access checks

2016-08-16 09:30:48 +02:00

arm64

arm64: Rework valid_user_regs

2016-07-27 09:47:33 -07:00

avr32

dmaengine updates for 4.4-rc1

2015-11-10 10:05:17 -08:00

blackfin

treewide: Remove old email address

2015-11-23 09:44:58 +01:00

c6x

…

cris

cris: Drop reference to get_cmos_time()

2015-11-02 20:03:05 +01:00

frv

kmap_atomic_to_page() has no users, remove it

2015-11-09 15:11:24 -08:00

h8300

h8300 update for v4.4

2015-11-12 15:26:39 -08:00

hexagon

…

ia64

ia64: define ioremap_uc()

2016-04-12 09:08:54 -07:00

m32r

m32r: fix m32104ut_defconfig build fail

2016-02-25 12:01:22 -08:00

m68k

m68k: Wire up mlock2

2015-11-22 11:35:26 +01:00

metag

Metag architecture changes for v4.4

2015-11-10 16:24:25 -08:00

microblaze

Revert "scatterlist: use sg_phys()"

2015-12-15 12:54:06 -08:00

mips

MIPS: KVM: Fix modular KVM under QEMU

2016-07-27 09:47:30 -07:00

mn10300

mn10300: Select CONFIG_HAVE_UID16 to fix build failure

2015-11-30 07:01:40 -08:00

nios2

nios2: fix cache coherency

2015-11-26 22:25:58 +08:00

openrisc

…

parisc

parisc: Fix pagefault crash in unaligned __get_user() call

2016-06-24 10:18:20 -07:00

powerpc

powerpc/tm: Always reclaim in start_thread() for exec() class syscalls

2016-07-27 09:47:28 -07:00

s390

s390: fix test_fp_ctl inline assembly contraints

2016-07-27 09:47:39 -07:00

score

…

sh

sched/preempt, sh: kmap_coherent relies on disabled preemption

2016-04-12 09:08:36 -07:00

sparc

sparc64: Fix return from trap window fill crashes.

2016-06-24 10:18:21 -07:00

tile

tile: provide CONFIG_PAGE_SIZE_64KB etc for tilepro

2016-01-05 08:16:09 -05:00

um

fs/coredump: prevent fsuid=0 dumps into user-controlled directories

2016-04-12 09:08:58 -07:00

unicore32

pwm: Changes for v4.4-rc1

2015-11-11 09:16:10 -08:00

x86

x86/mm/32: Enable full randomization on i386 and X86_32

2016-08-16 09:30:48 +02:00

xtensa

xtensa: clear all DBREAKC registers on start

2016-04-12 09:08:55 -07:00

.gitignore

…

Kconfig

…