iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
e78ca4d34768bc7c18cfce47c84b6a46bc40b855
linux/drivers
History
Milan Broz 41724dfbf8 dm crypt: fix benbi IV constructor crash if used in authenticated mode 
commit 4ea9471fbd upstream.

If benbi IV is used in AEAD construction, for example:
  cryptsetup luksFormat <device> --cipher twofish-xts-benbi --key-size 512 --integrity=hmac-sha256
the constructor uses wrong skcipher function and crashes:

 BUG: kernel NULL pointer dereference, address: 00000014
 ...
 EIP: crypt_iv_benbi_ctr+0x15/0x70 [dm_crypt]
 Call Trace:
  ? crypt_subkey_size+0x20/0x20 [dm_crypt]
  crypt_ctr+0x567/0xfc0 [dm_crypt]
  dm_table_add_target+0x15f/0x340 [dm_mod]

Fix this by properly using crypt_aead_blocksize() in this case.

Fixes: ef43aa3806 ("dm crypt: add cryptographic data integrity protection (authenticated encryption)")
Cc: stable@vger.kernel.org # v4.12+
Link: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=941051
Reported-by: Jerad Simpson <jbsimpson@gmail.com>
Signed-off-by: Milan Broz <gmazyland@gmail.com>
Signed-off-by: Mike Snitzer <snitzer@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-02-14 16:32:13 -05:00
..
accessibility
…
acpi
ACPI: video: Do not export a non working backlight interface on MSI MS-7721 boards
2020-02-14 16:32:09 -05:00
amba
…
android
binder: Handle start==NULL in binder_update_page_range()
2019-12-17 20:38:57 +01:00
ata
ahci: Do not export local variable ahci_em_messages
2020-01-27 14:46:44 +01:00
atm
atm: eni: fix uninitialized variable warning
2020-02-05 14:18:08 +00:00
auxdisplay
auxdisplay: panel: need to delete scan_timer when misc_register fails in panel_attach
2019-09-06 10:20:43 +02:00
base
PM: core: Fix handling of devices deleted during system-wide resume
2020-02-14 16:32:13 -05:00
bcma
bcma: fix incorrect update of BCMA_CORE_PCI_MDIO_DATA
2020-01-27 14:46:45 +01:00
block
signal: Allow cifs and drbd to receive their terminating signals
2020-01-27 14:46:43 +01:00
bluetooth
Bluetooth: btusb: fix PM leak in error case of setup
2020-01-09 10:17:57 +01:00
bus
…
cdrom
cdrom: respect device capabilities during opening action
2020-01-04 13:59:52 +01:00
char
ttyprintk: fix a potential deadlock in interrupt context issue
2020-02-05 14:18:15 +00:00
clk
clk: mmp2: Fix the order of timer mux parents
2020-02-05 14:18:18 +00:00
clocksource
clocksource/drivers/exynos_mct: Fix error path in timer resources initialization
2020-01-27 14:46:21 +01:00
connector
…
cpufreq
cpufreq: brcmstb-avs-cpufreq: Fix types for voltage/frequency
2020-01-27 14:46:37 +01:00
cpuidle
cpuidle: Do not unset the driver if it is there already
2019-12-17 20:39:33 +01:00
crypto
crypto: chelsio - fix writing tfm flags to wrong place
2020-02-05 14:18:03 +00:00
dax
…
dca
…
devfreq
PM / devfreq: Add new name attribute for sysfs
2020-02-05 14:18:12 +00:00
dio
…
dma
dmaengine: ti: edma: fix missed failure handling
2020-01-27 14:46:52 +01:00
dma-buf
dma-buf: Fix memory leak in sync_file_merge()
2019-12-21 10:47:50 +01:00
edac
EDAC/mc: Fix edac_mc_find() in case no device is found
2020-01-27 14:46:34 +01:00
eisa
…
extcon
extcon: sm5502: Reset registers during initialization
2019-12-31 12:37:06 +01:00
firewire
net: add annotations on hh->hh_len lockless accesses
2020-01-09 10:17:59 +01:00
firmware
efi/gop: Fix memory leak in __gop_query32/64()
2020-01-12 12:11:51 +01:00
fmc
…
fpga
fpga: altera-ps-spi: Fix getting of optional confd gpio
2019-09-21 07:15:32 +02:00
fsi
fsi: core: Fix small accesses and unaligned offsets via sysfs
2019-12-31 12:37:35 +01:00
gpio
gpio: max77620: Add missing dependency on GPIOLIB_IRQCHIP
2020-02-05 14:18:07 +00:00
gpu
drm/radeon: fix bad DMA from INTERRUPT_CNTL2
2020-01-27 14:46:53 +01:00
hid
HID: ite: Add USB id match for Acer SW5-012 keyboard dock
2020-02-05 14:18:05 +00:00
hsi
…
hv
hv_balloon: Balloon up according to request page number
2020-02-14 16:32:12 -05:00
hwmon
hwmon: (nct7802) Fix voltage limits to wrong registers
2020-01-29 15:02:38 +01:00
hwspinlock
…
hwtracing
coresight: tmc-etf: Do not call smp_processor_id from preemptible
2020-01-29 15:02:39 +01:00
i2c
i2c: imx: don't print error message on probe defer
2019-12-17 20:38:15 +01:00
ide
…
idle
…
iio
iio: dac: ad5380: fix incorrect assignment to val
2020-01-27 14:46:45 +01:00
infiniband
scsi: RDMA/isert: Fix a recently introduced regression related to logout
2020-01-29 15:02:38 +01:00
input
Input: sun4i-ts - add a check for devm_thermal_zone_of_sensor_register
2020-01-29 15:02:38 +01:00
iommu
iommu/amd: Wait for completion of IOTLB flush in attach_device
2020-01-27 14:46:47 +01:00
ipack
…
irqchip
irqchip: ingenic: Error out if IRQ domain creation failed
2020-01-04 13:59:42 +01:00
isdn
staging: gigaset: add endpoint-type sanity check
2019-12-17 20:39:06 +01:00
leds
leds: leds-lp5562 allow firmware files up to the maximum length
2019-10-05 12:47:45 +02:00
lightnvm
lightnvm: pblk: fix lock order in pblk_rb_tear_down_check
2020-01-27 14:46:32 +01:00
macintosh
macintosh/windfarm_smu_sat: Fix debug output
2019-12-01 09:13:39 +01:00
mailbox
mailbox: mailbox-test: fix null pointer if no mmio
2019-12-05 15:38:31 +01:00
mcb
…
md
dm crypt: fix benbi IV constructor crash if used in authenticated mode
2020-02-14 16:32:13 -05:00
media
media/v4l2-core: set pages dirty upon releasing DMA buffers
2020-02-14 16:32:08 -05:00
memory
…
memstick
memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()'
2019-10-29 09:17:43 +01:00
message
scsi: mptfusion: Fix double fetch bug in ioctl
2020-01-23 08:20:31 +01:00
mfd
mfd: dln2: More sanity checking for endpoints
2020-02-14 16:32:07 -05:00
misc
mic: avoid statically declaring a 'struct device'.
2020-01-27 14:46:40 +01:00
mmc
mmc: sdhci-of-at91: fix memleak on clk_get failure
2020-02-14 16:32:11 -05:00
mtd
mtd: spi-nor: fix silent truncation in spi_nor_read_raw()
2020-01-17 19:45:52 +01:00
mux
…
net
brcmfmac: Fix memory leak in brcmf_usbdev_qinit
2020-02-14 16:32:08 -05:00
nfc
NFC: pn533: fix bulk-message timeout
2020-01-23 08:20:34 +01:00
ntb
NTB: ntb_hw_idt: replace IS_ERR_OR_NULL with regular NULL checks
2020-01-27 14:46:05 +01:00
nubus
…
nvdimm
libnvdimm/btt: fix variable 'rc' set but not used
2020-01-04 13:59:46 +01:00
nvme
nvme: retain split access workaround for capability reads
2020-01-27 14:46:48 +01:00
nvmem
nvmem: imx-ocotp: Ensure WAIT bits are preserved when setting timing
2020-01-27 14:46:39 +01:00
of
of: Add OF_DMA_DEFAULT_COHERENT & select it on powerpc
2020-02-14 16:32:13 -05:00
oprofile
…
parisc
parisc: Disable HP HSC-PCI Cards to prevent kernel crash
2019-10-05 12:48:05 +02:00
parport
parport: load lowlevel driver if ports not found
2019-12-31 12:37:39 +01:00
pci
PCI: keystone: Fix link training retries initiation
2020-02-14 16:32:11 -05:00
pcmcia
…
perf
drivers/perf: arm_pmu: Fix failure path in PM notifier
2019-08-06 19:05:27 +02:00
phy
phy: cpcap-usb: Prevent USB line glitches from waking up modem
2020-02-05 14:18:05 +00:00
pinctrl
pinctrl: iproc-gpio: Fix incorrect pinconf configurations
2020-01-27 14:46:47 +01:00
platform
platform/x86: intel_scu_ipc: Fix interrupt support
2020-02-14 16:32:08 -05:00
pnp
…
power
power: supply: ltc2941-battery-gauge: fix use-after-free
2020-02-14 16:32:12 -05:00
powercap
…
pps
drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl
2019-08-04 09:32:03 +02:00
ps3
…
ptp
ptp: free ptp device pin descriptors properly
2020-01-23 08:20:35 +01:00
pwm
pwm: meson: Don't disable PWM when setting duty repeatedly
2020-01-27 14:46:34 +01:00
rapidio
drivers/rapidio/rio_cm.c: fix potential oops in riocm_ch_listen()
2020-01-27 14:46:25 +01:00
ras
RAS/CEC: Fix pfn insertion
2019-07-31 07:28:24 +02:00
regulator
regulator: tps65086: Fix tps65086_ldoa1_ranges for selector 0xB
2020-01-27 14:46:26 +01:00
remoteproc
remoteproc: Check for NULL firmwares in sysfs interface
2019-11-24 08:23:15 +01:00
reset
reset: Fix memory leak in reset_control_array_put()
2019-12-05 15:36:49 +01:00
rpmsg
rpmsg: glink: Free pending deferred work on remove
2019-12-21 10:47:47 +01:00
rtc
rtc: pcf2127: bugfix: read rtc disables watchdog
2020-01-27 14:46:44 +01:00
s390
s390/dasd: fix memleak in path handling error case
2020-01-12 12:12:00 +01:00
sbus
…
scsi
scsi: qla2xxx: Fix mtcp dump collection failure
2020-02-14 16:32:12 -05:00
sfi
…
sh
…
sn
…
soc
soc: ti: wkup_m3_ipc: Fix race condition with rproc_boot
2020-02-05 14:18:18 +00:00
spi
spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls
2020-02-05 14:18:06 +00:00
spmi
…
ssb
…
staging
staging: vt6656: Fix false Tx excessive retries reporting.
2020-02-05 14:18:02 +00:00
target
scsi: RDMA/isert: Fix a recently introduced regression related to logout
2020-01-29 15:02:38 +01:00
tc
…
tee
tee: optee: Fix compilation issue with nommu
2020-02-05 14:18:24 +00:00
thermal
thermal: cpu_cooling: Actually trace CPU load in thermal_power_cpu_get_power
2020-01-27 14:46:34 +01:00
thunderbolt
thunderbolt: Use 32-bit writes when writing ring producer/consumer
2019-11-06 12:43:22 +01:00
tty
serial: 8250_bcm2835aux: Fix line mismatch on driver unbind
2020-02-05 14:18:03 +00:00
uio
driver: uio: fix possible use-after-free in __uio_register_device
2020-01-27 14:46:15 +01:00
usb
usb: gadget: f_ecm: Use atomic_t to track in-flight request
2020-02-14 16:32:08 -05:00
uwb
…
vfio
vfio/mdev: Fix aborting mdev child device removal if one fails
2020-01-27 14:46:33 +01:00
vhost
vhost/vsock: accept only packets with the right dst_cid
2020-01-04 14:00:14 +01:00
video
backlight: lm3630a: Return 0 on success in update_status functions
2020-01-27 14:46:34 +01:00
virt
…
virtio
virtio-balloon: fix managed page counts when migrating pages between zones
2019-12-17 20:39:14 +01:00
vlynq
…
vme
…
w1
w1: IAD Register is yet readable trough iad sys file. Fix snprintf (%u for unsigned, count for max size).
2019-12-01 09:13:24 +01:00
watchdog
watchdog: rn5t618_wdt: fix module aliases
2020-02-05 14:18:06 +00:00
xen
net: add {READ|WRITE}_ONCE() annotations on ->rskq_accept_head
2020-01-27 14:46:50 +01:00
zorro
…
Kconfig
…
Makefile
…