| commit | fc87d893e2eebdefcdb88db94c968c8ffcb9e2d2 | [log] [tgz] |
|---|---|---|
| author | Budimir Markovic <[email protected]> | Thu Aug 24 01:49:05 2023 -0700 |
| committer | Michael Kochera <[email protected]> | Sun Sep 17 10:56:43 2023 +0000 |
| tree | 7185fda43c7805d1dc4ba8318918bcab4cce3fa3 | |
| parent | b0ba2d9ab480d87acc53e72757a66b5d22e8fbc0 [diff] |
net/sched: sch_hfsc: Ensure inner classes have fsc curve
[ Upstream commit b3d26c5702c7d6c45456326e56d2ccf3f103e60f ]
HFSC assumes that inner classes have an fsc curve, but it is currently
possible for classes without an fsc curve to become parents. This leads
to bugs including a use-after-free.
Don't allow non-root classes without HFSC_FSC to become parents.
BUG=b/300063329
TEST=None
RELEASE_NOTE=Fixed CVE-2023-4623 in the linux kernel.
cos-patch: security-high
Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Reported-by: Budimir Markovic <[email protected]>
Signed-off-by: Budimir Markovic <[email protected]>
Acked-by: Jamal Hadi Salim <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Change-Id: Ie5cb6ce6ca451825c460587c46a577ab7fe3e9ee
Signed-off-by: Jakub Kicinski <[email protected]>
Signed-off-by: Sasha Levin <[email protected]>
Reviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/57327
Tested-by: Cusky Presubmit Bot <[email protected]>
Reviewed-by: Oleksandr Tymoshenko <[email protected]>