integ/kernel-std/centos/meta_patches/CVE-mqueue-fix-a-use-after-free-in-sys_mq_notify.patch
Dean Troyer 3cd12006bb StarlingX open source release updates
Signed-off-by: Dean Troyer <dtroyer@gmail.com>
2018-05-31 07:36:35 -07:00

36 lines
1.5 KiB
Diff

From c75bec8f18ac99965a5134e541b4334d82a0f2a3 Mon Sep 17 00:00:00 2001
Message-Id: <c75bec8f18ac99965a5134e541b4334d82a0f2a3.1517514415.git.Jim.Somerville@windriver.com>
From: Jim Somerville <Jim.Somerville@windriver.com>
Date: Tue, 19 Dec 2017 17:53:28 -0500
Subject: [PATCH 1/1] CVE mqueue fix a use after free in sys_mq_notify
Signed-off-by: Jim Somerville <Jim.Somerville@windriver.com>
---
SPECS/kernel.spec | 3 +++
1 file changed, 3 insertions(+)
diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec
index 8532f98..db2e319 100644
--- a/SPECS/kernel.spec
+++ b/SPECS/kernel.spec
@@ -450,6 +450,8 @@ Patch40026: aic94xx-Skip-reading-user-settings-if-flash-is-not-f.patch
Patch40027: dpt_i2o-fix-build-warning.patch
Patch40028: KVM-x86-remove-irq-disablement-around-KVM_SET_CLOCK-.patch
Patch40029: KVM-x86-Fix-potential-preemption-when-get-the-curren.patch
+# CVE-2017-11176: kernel: Use-after-free in sys_mq_notify()
+Patch40030: mqueue-fix-a-use-after-free-in-sys_mq_notify.patch
BuildRoot: %{_tmppath}/kernel-%{KVRA}-root
@@ -802,6 +804,7 @@ ApplyOptionalPatch aic94xx-Skip-reading-user-settings-if-flash-is-not-f.patch
ApplyOptionalPatch dpt_i2o-fix-build-warning.patch
ApplyOptionalPatch KVM-x86-remove-irq-disablement-around-KVM_SET_CLOCK-.patch
ApplyOptionalPatch KVM-x86-Fix-potential-preemption-when-get-the-curren.patch
+ApplyOptionalPatch mqueue-fix-a-use-after-free-in-sys_mq_notify.patch
# Any further pre-build tree manipulations happen here.
--
1.8.3.1