diff options
| author | Jann Horn <[email protected]> | 2018-07-06 17:12:56 +0200 |
|---|---|---|
| committer | Greg Kroah-Hartman <[email protected]> | 2018-07-06 17:21:34 +0200 |
| commit | f1e255d60ae66a9f672ff9a207ee6cd8e33d2679 (patch) | |
| tree | 94f248f891c1c7876417e836412e7672c4608ab8 /drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | |
| parent | bba57eddadda936c94b5dccf73787cb9e159d0a5 (diff) | |
USB: yurex: fix out-of-bounds uaccess in read handler
In general, accessing userspace memory beyond the length of the supplied
buffer in VFS read/write handlers can lead to both kernel memory corruption
(via kernel_read()/kernel_write(), which can e.g. be triggered via
sys_splice()) and privilege escalation inside userspace.
Fix it by using simple_read_from_buffer() instead of custom logic.
Fixes: 6bc235a2e24a ("USB: add driver for Meywa-Denki & Kayac YUREX")
Signed-off-by: Jann Horn <[email protected]>
Cc: stable <[email protected]>
Signed-off-by: Greg Kroah-Hartman <[email protected]>
Diffstat (limited to 'drivers/gpu/drm/amd/amdgpu/amdgpu_object.c')
0 files changed, 0 insertions, 0 deletions