Received-SPF: pass (google.com: domain of linux-bluetooth-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
From:   Dragos-Marian Panait <dragos.panait@windriver.com>
To:     stable@vger.kernel.org
Cc:     Ruihan Li <lrh2000@pku.edu.cn>,
        Marcel Holtmann <marcel@holtmann.org>,
        Luiz Augusto von Dentz <luiz.von.dentz@intel.com>,
        Johan Hedberg <johan.hedberg@gmail.com>,
        Paolo Abeni <pabeni@redhat.com>,
        "David S . Miller" <davem@davemloft.net>,
        Eric Dumazet <edumazet@google.com>,
        Jakub Kicinski <kuba@kernel.org>, netdev@vger.kernel.org,
        linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org
Subject: [PATCH 5.10 0/1] Hardening against CVE-2023-2002
Date:   Tue, 30 May 2023 15:42:07 +0300
Message-Id: <20230530124208.242573-1-dragos.panait@windriver.com>
Content-Transfer-Encoding: 8bit
Content-Type: text/plain
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?UV0RTJEA/cXjCXNHAqFdQbDDZ8norJ983wSVWhTULGAJr6CG02FYqE4goyHF?=
 =?us-ascii?Q?LNgW6fu2NI1p09Kp61ps2WOO5X9tqde3DvK3g06vQoWdOh+U1uqhqur2dtSy?=
 =?us-ascii?Q?1Iy7mgjOGUgJiaoweCPmqNzThlWgPuft5IvopKT2OfjRNDPdK6go063oLd94?=
 =?us-ascii?Q?e3ILYqjLXdL9BzZs/LotkOBQeFZsFbbbXg0GwLbDSOWF/mtZaJ9EIcSzQxOn?=
 =?us-ascii?Q?CAbxYQe8fb1braz4biXqBnoMNf0YFxR+VfxnJRcYfNim4+WlejlfXop9urQM?=
 =?us-ascii?Q?8f4y6uQwRNmA3yVh/KV8GEzaUK38aLtdSv0RMnJTr8TJe0Tb+U2Im6mZ14Ol?=
 =?us-ascii?Q?Ob9YS9ei4sN6ZUF9FaS4jrn88Kdzga7ivTx3Uw3rmngXvi1NNQqNSMXR2hdz?=
 =?us-ascii?Q?kz/OnCMeNYyyYZnCvj4ISKlbu66B6d65LW6vHAOw8zNZv7rLsoDi3aDUT2Hj?=
 =?us-ascii?Q?tOgbk5kVTCeE8SbMLcBbr9Cc8uGpHeiF7rc8BIS29I+qv3bG0fIzYfnHTgWO?=
 =?us-ascii?Q?prTxtC7au0sGjDsaWHEnzqZzQMLJrvVQ8ltVpMV0GgkSUdCGpCip5622BPod?=
 =?us-ascii?Q?WhAUOpuThletQGEBZAF1fqVwuJL+C4sGOBXFKi8PMNeS9/7tfHY5Wc/RO2+B?=
 =?us-ascii?Q?YQZ/rJkZhYDs4d0gBWKVP0C0RS7DDg54Vj4/Og4NI5uwuGBrJBsbNpt4ThFy?=
 =?us-ascii?Q?4psFWmUvVRCHH3Mb2JFUv9dOFGbqTwyB2u0uHE067fJU17My3vfcpJ1ddeUr?=
 =?us-ascii?Q?iWDBvihViyqJqZWu9dejncrFLNDsrB3H8dGtL33vn6f19aIsgoEiG+8OpZib?=
 =?us-ascii?Q?pwqskDkS8dvv6GKZ/Co0XSqr08+m8tlFrYawQBTUOKSqbfJpGmKX4CNzEQN6?=
 =?us-ascii?Q?o0qesEthQ1Zn3ioZzHJkEzDhPPx7+rqmRv/+6DHa0LE/kwGgXxG7+XEeGaav?=
 =?us-ascii?Q?QfZZshsIJHNh59wAvhBCoY9IBORC96LdD5wKecgYOw/KbYLOM+oSK8yznMah?=
 =?us-ascii?Q?1pUz4W0vl/uA6AY9N0fBe23wSSHoBd+SW5Ste3quDNMrHzoeHdokUAW9nSX4?=
 =?us-ascii?Q?Uh9yBHq5sf2YhSXx8U+ggUEZp8/gjIFIys4OI9zYbasl7eJ37H2vOy7hobEp?=
 =?us-ascii?Q?dwxzxUovTAn82Xteq/r5XfJDueqEfdA07egpw4+NEmiMeZ7DXX0ZXekgXmNk?=
 =?us-ascii?Q?PO83H0atuBSE5idgFbvkhSgo0V1Qtt3691qVqEFc+YUipEQL8ELIgoUy0tRp?=
 =?us-ascii?Q?5OAPROE2Es7Q6hORTqTvC8IwuKb81R3/RXWdv0QT7yO7kUWX4+lv4vgourKG?=
 =?us-ascii?Q?Lm/t5XjL4oNJIkFK2dcZs/cCk2Edu4ToAQxM7aFIuy7CsqpcnlxUg0haQpkA?=
 =?us-ascii?Q?WqVrTWJdR+8JFplnUSJydQew9fDdounDWCE3E9M2qBL1ZO2cyiNDvISGYN2t?=
 =?us-ascii?Q?BOOJzqNhDHRPJXoBq25+iv/jFVdy9I9PmQmxeYmtBlzvEN1ELwUuo3MfH8No?=
 =?us-ascii?Q?sR9l6khKMemoryoNK+3wKWBtTdpqwBesTtEhPL2RjFS7AZOFBeTR7L5yvmHB?=
 =?us-ascii?Q?z/QAI1+WvvjH4Nkv1UeFiXCvOnEVu80pVcezytMqvp0uvVgLzhya1zko5xxf?=
 =?us-ascii?Q?+A=3D=3D?=
X-OriginatorOrg: windriver.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 84b5adf4-8bd9-4025-1601-08db610b504d
X-MS-Exchange-CrossTenant-AuthSource: PH0PR11MB4952.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 May 2023 12:42:22.7066
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 8ddb2873-a1ad-4a18-ae4e-4644631433be
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: WMpAEyxmxy8emj41E/UnEAkvBSxd+ww+zrLK0S7ycOIqCL5ILCN26+oeEJJUzJMClkyZkNZFfpEPQw5fNRZXf64Ek1dw/p/qqO0M/4nVADE=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ0PR11MB5117
X-Proofpoint-ORIG-GUID: zeQPKb65bBnngAQkxlHpGA0kK62ochhD
X-Proofpoint-GUID: zeQPKb65bBnngAQkxlHpGA0kK62ochhD
X-Proofpoint-Virus-Version: vendor=baseguard
 engine=ICAP:2.0.254,Aquarius:18.0.957,Hydra:6.0.573,FMLib:17.11.176.26
 definitions=2023-05-30_08,2023-05-30_01,2023-05-22_02
X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 lowpriorityscore=0
 clxscore=1015 malwarescore=0 bulkscore=0 mlxlogscore=602 impostorscore=0
 suspectscore=0 adultscore=0 phishscore=0 spamscore=0 priorityscore=1501
 mlxscore=0 classifier=spam adjust=0 reason=mlx scancount=1
 engine=8.12.0-2304280000 definitions=main-2305300104
X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED,
        DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_MSPIKE_H3,
        RCVD_IN_MSPIKE_WL,SPF_HELO_NONE,SPF_PASS,T_SCC_BODY_TEXT_LINE,
        URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
        lindbergh.monkeyblade.net
Precedence: bulk
List-ID: <linux-bluetooth.vger.kernel.org>
X-Mailing-List: linux-bluetooth@vger.kernel.org

The following commit is needed to harden against CVE-2023-2002:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=000c2fa2c144c499c881a101819cf1936a1f7cf2

Ruihan Li (1):
  bluetooth: Add cmd validity checks at the start of hci_sock_ioctl()

 net/bluetooth/hci_sock.c | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)


base-commit: 4c893ff55907c61456bcb917781c0dd687a1e123
-- 
2.40.1