]> git.hungrycats.org Git - linux/commit
projects / linux / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 160df0e) | patch
[CPUFREQ] Fix security hole in proc handler.
authorDave Jones <davej@redhat.com>
Wed, 21 Apr 2004 20:49:59 +0000 (21:49 +0100)
committerDave Jones <davej@delerium.codemonkey.org.uk>
Wed, 21 Apr 2004 20:49:59 +0000 (21:49 +0100)
commitad4c196a84b161214275b73fbc08fedd5959c715
tree6d0be54d04b70fe028c85d81f70116eeff9cb301tree | snapshot
parent160df0e8789ab451196510d2941930064531ffdccommit | diff
[CPUFREQ] Fix security hole in proc handler.
Brad Spengler <spender@grsecurity.net> found an exploitable bug in the proc handler
of cpufreq, where a user-supplied unsigned int is cast to a signed int and then
passed on to copy_[to|from]_user() allowing arbitary amounts of memory to be written
(root only thankfully), or read (as any user).

The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned
the name CAN-2004-0228 to this issue.
drivers/cpufreq/cpufreq_userspace.c diff | blob | history
Linux kernels and configurations used by Zygo.