Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Dismissed
(max. allowed matches exceeded)
created 2 weeks, 6 days ago Activity log
  • Created & dismissed (max. allowed matches exceeded) suggestion
RDMA/core: Validate the passed in fops for ib_get_ucaps()

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Validate the passed in fops for ib_get_ucaps() Sashiko pointed out it is not safe to rely only on the devt because char/block alias so if the user finds a block device with the same dev_t it can masquerade as a ucap cdev fd. Test the f_ops to only accept authentic cdevs.

Affected products

Linux
  • =<6.18.*
  • <4a1b1ac2744694a2ecd66a84bdb1445f4ef24bee
  • =<7.0.*
  • <aa181287ebdcc53ee0ba5c2f8243e2d541ebc19b
  • <6.15
  • ==6.15
  • <96b6e98ff12d50ed5817230c6f1188e1150d225d
  • =<*