Kees Cook ffc8b30866 block: do not pass disk names as format strings ...

Disk names may contain arbitrary strings, so they must not be
interpreted as format strings.  It seems that only md allows arbitrary
strings to be used for disk names, but this could allow for a local
memory corruption from uid 0 into ring 0.

CVE-2013-2851

Signed-off-by: Kees Cook <[email protected]>
Cc: Jens Axboe <[email protected]>
Cc: <[email protected]>
Signed-off-by: Andrew Morton <[email protected]>
Signed-off-by: Linus Torvalds <[email protected]>

2013-07-03 16:07:25 -07:00

..

partitions

partitions/efi.c: replace useless kzalloc's by kmalloc's

2013-04-30 08:34:25 +02:00

blk-cgroup.c

blkcg: fix "scheduling while atomic" in blk_queue_bypass_start

2013-04-09 15:01:21 +02:00

blk-cgroup.h

cgroup: fix cgroup_path() vs rename() race

2013-03-04 09:50:08 -08:00

blk-core.c

Merge branch 'for-3.11' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/wq

2013-07-02 19:53:30 -07:00

blk-exec.c

Merge branch 'for-3.9/core' of git://git.kernel.dk/linux-block

2013-02-28 12:52:24 -08:00

blk-flush.c

Block: blk-flush: Fixed indent code style

2013-03-22 12:22:51 -06:00

blk-integrity.c

scatterlist: introduce sg_unmark_end

2013-03-20 15:43:04 +10:30

blk-ioc.c

block: queue work on power efficient wq

2013-05-14 10:50:07 -07:00

blk-iopoll.c

tree-wide: fix assorted typos all over the place

2009-12-04 15:39:55 +01:00

blk-lib.c

block: account iowait time when waiting for completion of IO request

2013-02-15 16:45:07 +01:00

blk-map.c

block: re-use existing 'reading' variable instead of checking direction again

2011-12-21 15:27:24 +01:00

blk-merge.c

scatterlist: introduce sg_unmark_end

2013-03-20 15:43:04 +10:30

blk-settings.c

block: discard granularity might not be power of 2

2012-12-14 20:46:04 +01:00

blk-softirq.c

sched, block: Unify cache detection

2012-01-27 13:28:48 +01:00

blk-sysfs.c

block: avoid using uninitialized value in from queue_var_store

2013-04-03 21:53:57 +02:00

blk-tag.c

block/blk-tag.c: Remove useless kfree

2012-09-12 22:25:12 +02:00

blk-throttle.c

block: Rename queue dead flag

2012-12-06 14:30:58 +01:00

blk-timeout.c

block: Drop dead function blk_abort_queue()

2012-06-15 08:46:23 +02:00

blk.h

block,elevator: use new hashtable implementation

2013-01-11 14:43:13 +01:00

bsg-lib.c

bsg: Remove unused function bsg_goose_queue()

2012-12-06 14:33:02 +01:00

bsg.c

hlist: drop the node parameter from iterators

2013-02-27 19:10:24 -08:00

cfq-iosched.c

block: Add bio_end_sector()

2013-03-23 14:15:29 -07:00

compat_ioctl.c

block/compat_ioctl.c: do not leak info to user-space

2013-07-03 16:07:25 -07:00

deadline-iosched.c

block: Add bio_end_sector()

2013-03-23 14:15:29 -07:00

elevator.c

block: implement runtime pm strategy

2013-03-22 22:22:15 -06:00

genhd.c

block: do not pass disk names as format strings

2013-07-03 16:07:25 -07:00

ioctl.c

Merge branch 'for-3.7/core' of git://git.kernel.dk/linux-block

2012-10-11 09:04:23 +09:00

Kconfig

block: don't select PERCPU_RWSEM

2013-02-22 10:42:45 +01:00

Kconfig.iosched

blkcg: make CONFIG_BLK_CGROUP bool

2012-03-06 21:27:21 +01:00

Makefile

separate partition format handling from generic code

2012-01-03 22:54:06 -05:00

noop-iosched.c

elevator: make elevator_init_fn() return 0/-errno

2012-03-06 21:27:21 +01:00

partition-generic.c

Revert "loop: cleanup partitions when detaching loop device"

2013-04-08 10:12:11 +02:00

scsi_ioctl.c

aio: don't include aio.h in sched.h

2013-05-07 20:16:25 -07:00