Quantcast
Channel: Mellanox Interconnect Community: Message List
Viewing all articles
Browse latest Browse all 6275

Re: CVE 2014-8159 vulnerability

$
0
0
Seems that MLNX_OFED-2.4 does not have this check, so it's time to patch and rebuild IB drivers :-(

diff -ur linux-2.6.32-504.8.1.el6/drivers/infiniband/core/umem.c linux-2.6.32-504.12.2.el6/drivers/infiniband/core/umem.c

--- linux-2.6.32-504.8.1.el6/drivers/infiniband/core/umem.c     2014-12-19 18:31:21.000000000 +0200

+++ linux-2.6.32-504.12.2.el6/drivers/infiniband/core/umem.c    2015-02-01 18:24:27.000000000 +0200

@@ -92,6 +92,14 @@

        if (dmasync)

                dma_set_attr(DMA_ATTR_WRITE_BARRIER, &attrs);

 

+       /*

+        * If the combination of the addr and size requested for this memory

+        * region causes an integer overflow, return error.

+        */

+       if ((PAGE_ALIGN(addr + size) <= size) ||

+           (PAGE_ALIGN(addr + size) <= addr))

+               return ERR_PTR(-EINVAL);

+

        if (!can_do_mlock())

                return ERR_PTR(-EPERM);


Viewing all articles
Browse latest Browse all 6275

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>