Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <CABXRUiSOsXJCh_hbgzD+=EVys-N=HK_h0kZ2GU=p+G2Y1daTSQ@mail.gmail.com>
Date: Thu, 18 Apr 2019 21:32:10 +0800
From: Fuqian Huang <huangfq.daxian@...il.com>
To: oss-security@...ts.openwall.com
Subject: Linux kernel < 4.14.111 drivers/media/pci/saa7164/saa7164-core.c
 kernel address dumps to user space

In drivers/media/pci/saa7164/saa7164-core.c:1059,
saa7164_proc_show will dump the address of dev into procfs,
local user could read kernel address information via /proc/saa7164.

static int saa7164_proc_show(struct seq_file *m, void *v)
{
    ...
        seq_printf(m, "%s = %p\n", dev->name, dev);
    ...
}

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.