Re: [SECURITY] CAN-2004-0075 (was: Re: [SECURITY] CAN-2004-0109 isofs fix.)

Greg KH
2004-04-14T21:27:47Z

On Wed, Apr 14, 2004 at 10:30:33PM +0200, Marc-Christian Petersen wrote:
> On Wednesday 14 April 2004 19:11, Dave Jones wrote:
>
> Hi,
>
> > Merged in 2.4, and various vendor kernels today..
>
> Okay, now while we are at fixing security holes, is there any chance we
> can _finally_ get the attached patch in?
>
> The Vicam USB driver in all Linux Kernels 2.6 mainline does not use the
> copy_from_user function when copying data from userspace to kernel space,
> which crosses security boundaries and allows local users to cause a denial
> of service.
>
> Already ACKed by Greg. Only complaint was inproper coding style which is done
> with attached patch ;)

Eeek, I thought this one was already in the tree, very sorry about that.

I'm applying it now and will send it to Linus in a bit.

thanks for reminding me,

greg k-h