Alexander Usyskin a007fc3d65 mei: validate request value in client notify request ioctl ...

commit 7326fffb71 upstream.

This patch address a possible security issue:

The request field in client notify request ioctl comes from user space
as u32 and is downcasted to u8 with out validation.
Check request field to have approved values
MEI_HBM_NOTIFICATION_STAR/STOP

Signed-off-by: Alexander Usyskin <alexander.usyskin@intel.com>
Signed-off-by: Tomas Winkler <tomas.winkler@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2016-03-03 15:07:13 -08:00

..

altera-stapl

…

c2port

drivers: misc: Drop unlikely before IS_ERR(_OR_NULL)

2015-09-29 15:11:40 +02:00

cb710

…

cxl

cxl: Set endianess of kernel contexts

2015-12-08 16:57:01 +11:00

echo

…

eeprom

Merge tag 'mfd-for-linus-4.4' of git://git.kernel.org/pub/scm/linux/kernel/git/lee/mfd

2015-11-06 10:23:50 -08:00

genwqe

misc: genwqe: fix a comment typo

2015-10-04 12:57:15 +01:00

ibmasm

…

lis3lv02d

spi: Drop owner assignment from spi_drivers

2015-10-28 10:30:17 +09:00

mei

mei: validate request value in client notify request ioctl

2016-03-03 15:07:13 -08:00

mic

misc: mic/scif: fix error code in scif_create_remote_lookup()

2015-10-17 21:49:48 -07:00

sgi-gru

misc: sgi-gru: fix return of error

2015-10-04 12:55:59 +01:00

sgi-xp

…

ti-st

ti-st: use worker instead of calling st_int_write in wake up

2015-09-20 22:52:13 -07:00

vmw_vmci

misc/vmw_vmci: use kmemdup rather than duplicating its implementation

2015-09-20 19:27:58 -07:00

ad525x_dpot-i2c.c

misc: ad525x_dpot: Remove unnecessary MODULE_ALIAS()

2015-09-20 19:33:29 -07:00

ad525x_dpot-spi.c

spi: Drop owner assignment from spi_drivers

2015-10-28 10:30:17 +09:00

ad525x_dpot.c

…

ad525x_dpot.h

…

apds990x.c

…

apds9802als.c

…

arm-charlcd.c

…

atmel_tclib.c

misc: atmel_tclib: get and use slow clock

2015-10-06 12:33:14 +02:00

atmel-ssc.c

…

bh1770glc.c

…

bh1780gli.c

…

bmp085-i2c.c

…

bmp085-spi.c

spi: Drop owner assignment from spi_drivers

2015-10-28 10:30:17 +09:00

bmp085.c

…

bmp085.h

…

cs5535-mfgpt.c

…

ds1682.c

…

dummy-irq.c

…

enclosure.c

…

fsa9480.c

…

hmc6352.c

…

hpilo.c

misc: hpilo: Change e-mail address from hp.com to hpe.com

2015-10-04 12:42:33 +01:00

hpilo.h

…

ics932s401.c

…

ioc4.c

…

isl29003.c

…

isl29020.c

…

Kconfig

VMware balloon: Enable notification via VMCI

2015-10-04 12:59:11 +01:00

kgdbts.c

drivers/misc: make kgdbts.c slightly more explicitly non-modular

2015-09-20 19:32:35 -07:00

lattice-ecp3-config.c

spi: Drop owner assignment from spi_drivers

2015-10-28 10:30:17 +09:00

lkdtm.c

lkdtm: fix ACCESS_USERSPACE test

2015-10-29 09:02:16 +09:00

Makefile

…

pch_phub.c

…

phantom.c

…

pti.c

…

qcom-coincell.c

…

spear13xx_pcie_gadget.c

spear13xx_pcie_gadget: use per-attribute show and store methods

2015-10-13 22:17:40 -07:00

sram.c

misc: sram: partition base address belongs to __iomem space

2015-10-18 19:00:36 -07:00

ti_dac7512.c

spi: Drop owner assignment from spi_drivers

2015-10-28 10:30:17 +09:00

tifm_7xx1.c

…

tifm_core.c

…

tsl2550.c

…

vexpress-syscfg.c

…

vmw_balloon.c

mm, page_alloc: rename __GFP_WAIT to __GFP_RECLAIM

2015-11-06 17:50:42 -08:00