diff options
Diffstat (limited to 'recipes-kernel/linux/linux-hierofalcon/vhost-CVE-2015-6252.patch')
-rw-r--r-- | recipes-kernel/linux/linux-hierofalcon/vhost-CVE-2015-6252.patch | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/recipes-kernel/linux/linux-hierofalcon/vhost-CVE-2015-6252.patch b/recipes-kernel/linux/linux-hierofalcon/vhost-CVE-2015-6252.patch new file mode 100644 index 0000000..658fed1 --- /dev/null +++ b/recipes-kernel/linux/linux-hierofalcon/vhost-CVE-2015-6252.patch | |||
@@ -0,0 +1,33 @@ | |||
1 | From 7932c0bd7740f4cd2aa168d3ce0199e7af7d72d5 Mon Sep 17 00:00:00 2001 | ||
2 | Date: Fri, 17 Jul 2015 15:32:03 +0200 | ||
3 | Subject: vhost: actually track log eventfd file | ||
4 | |||
5 | While reviewing vhost log code, I found out that log_file is never | ||
6 | set. Note: I haven't tested the change (QEMU doesn't use LOG_FD yet). | ||
7 | |||
8 | Fixes CVE-2015-6252. | ||
9 | Upstream-Status: Backport | ||
10 | |||
11 | Cc: stable@vger.kernel.org | ||
12 | Signed-off-by: Marc-André Lureau <marcandre.lureau@redhat.com> | ||
13 | Signed-off-by: Michael S. Tsirkin <mst@redhat.com> | ||
14 | Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> | ||
15 | --- | ||
16 | drivers/vhost/vhost.c | 1 + | ||
17 | 1 file changed, 1 insertion(+) | ||
18 | |||
19 | diff --git a/drivers/vhost/vhost.c b/drivers/vhost/vhost.c | ||
20 | index a9fe859..95bdb90 100644 | ||
21 | --- a/drivers/vhost/vhost.c | ||
22 | +++ b/drivers/vhost/vhost.c | ||
23 | @@ -995,6 +995,7 @@ long vhost_dev_ioctl(struct vhost_dev *d, unsigned int ioctl, void __user *argp) | ||
24 | } | ||
25 | if (eventfp != d->log_file) { | ||
26 | filep = d->log_file; | ||
27 | + d->log_file = eventfp; | ||
28 | ctx = d->log_ctx; | ||
29 | d->log_ctx = eventfp ? | ||
30 | eventfd_ctx_fileget(eventfp) : NULL; | ||
31 | -- | ||
32 | cgit v0.11.2 | ||
33 | |||