Received-SPF: pass (google.com: domain of linux-bluetooth-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
From:   Dragos-Marian Panait <dragos.panait@windriver.com>
To:     stable@vger.kernel.org
Cc:     Ruihan Li <lrh2000@pku.edu.cn>,
        Marcel Holtmann <marcel@holtmann.org>,
        Luiz Augusto von Dentz <luiz.von.dentz@intel.com>,
        Johan Hedberg <johan.hedberg@gmail.com>,
        Paolo Abeni <pabeni@redhat.com>,
        "David S . Miller" <davem@davemloft.net>,
        Eric Dumazet <edumazet@google.com>,
        Jakub Kicinski <kuba@kernel.org>, netdev@vger.kernel.org,
        linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org
Subject: [PATCH 5.4 0/1] Hardening against CVE-2023-2002
Date:   Tue, 30 May 2023 15:47:14 +0300
Message-Id: <20230530124715.248505-1-dragos.panait@windriver.com>
Content-Transfer-Encoding: 8bit
Content-Type: text/plain
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?S2vPxWgBbtSBqzYTRP4PXq72EtqJ31lgyFtfRr6bsnnOC85VAQJTyqJmxnUj?=
 =?us-ascii?Q?mv6Mbwjt/WpZZXf5btSVoie1wUX08+JonHmIGFphxwuCEffyy63WdjF1ihZ3?=
 =?us-ascii?Q?5VaeOdCtzX9wPWkptGCOZahrhC980kjSY27uXgdX3ksx3af7tHDK9BvIJ/+r?=
 =?us-ascii?Q?otIZ1qJ1789O8X/O0GcrhLGFN7nZp+2AjaKn1WP3hybu5P9mxO/W1nSir129?=
 =?us-ascii?Q?XSfG7v2MRuQ8JWhsWYAEPE95xuce6tst1j2utKSAi0dHcmXIKO1uVjAwZhxc?=
 =?us-ascii?Q?WoyJ7ovZQKwQjbtXxWfvwt1Msl+HtAUo0S3dDDJgf0snXyOq0vZ1gmJRU9Ik?=
 =?us-ascii?Q?Dperm07/KDakOkWNGHhBkoi1eHacjQ835W6dC37wuyGNiQVSxcmCvgcSAhHi?=
 =?us-ascii?Q?HNrh2qS76uO4za3dS7F9jaF0cRgqZJP3OiCr+JUUYthJZB8LjmLDsL86v3R3?=
 =?us-ascii?Q?PHX0KIvM3ALaFwBNaQjQZSkBHmygMnFS4sTyVFobUHd24uPGock130NLlwbx?=
 =?us-ascii?Q?eUl2i+xlFF/CUf0dfSQ/AfEXNhIFWnr4BqRbrOYloRRACq5RrIWOVxWZsYze?=
 =?us-ascii?Q?x7xX4FKXXQwNAbNmdTt9UCr3ZI+jVB5H9omNlxPUboWC830bMt16+f5qF2X5?=
 =?us-ascii?Q?PESkvk4eZSfUSi7rgW0z7bWA2NKlMGBFYi3c/M5tTPGEZQ7yiCMltH1soa3b?=
 =?us-ascii?Q?0DMLs1n0MN5BS7sGlW4ii6BiYz8FMf6B8JGL7BBxooVosNcMn2uAEFNUj7qg?=
 =?us-ascii?Q?7nk0C/ocmCY2ZEDab7T8wraPqJxFMtFJJZ7vefroRfL/IGlcd5vVSJO4P+pU?=
 =?us-ascii?Q?rD6Z/HLUhAtxNzsfG4DS2rpR3BSCNyUX8R6oTwXjkN6rxFUgVHzT69H+lwQn?=
 =?us-ascii?Q?eJi6pOqL8LP51BbX/5/GGWBPTwMGDI8cFERt8YBzP3BUVhr4njJPOh7Rvi/T?=
 =?us-ascii?Q?ZJCQUir1rUPMUOibkNWgjwenScA/vcq1xA+EolpiOE3Cv7tFwuhNVNAVsoNc?=
 =?us-ascii?Q?1LBk9rA8SA5lzfVWlZxeeWdeuAVNE19i8KibUY6aWXtkbAYjq+G9IfwdYhcQ?=
 =?us-ascii?Q?gzsuF0ihxv7pbLzL2aNZHAwPhwXduqr8zH6LJV1AjeEVdOyY4dNjXTdjxDNC?=
 =?us-ascii?Q?jVEVfQ7ABawsHQ0f12PVZfh9r4MuqoJNRABmk81VmRDKki4c6eSsqrPFQ/hM?=
 =?us-ascii?Q?dRTC9nIRhecRGBxQcQMxHpY64b6QvbQCuUkioysIAy3vkE8FS/5UfbgQZ60L?=
 =?us-ascii?Q?PFapiOXDg78jGS4Xc8DH3dSSBC/eTxni6J7/ypYqC2zPy/+4qqyXXRJTRhr+?=
 =?us-ascii?Q?0QNkMnwp4mHmxF9rqbjkPyvH8OxXy91mDZ4RujVNy0CjN3P+yVf3G4EqdlyH?=
 =?us-ascii?Q?agzeUyHZAkuB+G466tAnZJsO/oFLjsvPSYv05/bR2W+AExdftXTf7DepNSd7?=
 =?us-ascii?Q?tUfLDx/1Fii5ljdWqCQvIBnDj30FoImyadqukZ5gPgPA6TbEUXcO9SIKkTBO?=
 =?us-ascii?Q?8w9b1uqSmRjSXFlIb7BFPvwZBF5PXf52Vlm5yYWk6n1007ek2rSWFlezbqo/?=
 =?us-ascii?Q?b8cS4rbmVWLNCswRW8kVwSg19QU2MXsCPAyAcV22/zxVv5D6ykKlFamvGzAJ?=
 =?us-ascii?Q?7g=3D=3D?=
X-OriginatorOrg: windriver.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 2607c4df-4108-4602-6fb3-08db610c0673
X-MS-Exchange-CrossTenant-AuthSource: PH0PR11MB4952.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 May 2023 12:47:28.2004
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 8ddb2873-a1ad-4a18-ae4e-4644631433be
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: yoUcukSFTB3iv899739ok++jqzZxCV+mIRxf7aZfS44knjctY5ehZn/l/lShcYdVjEVIPWEkYLcsgx7E7X2gxdQgbEE4cLnPk4YWAvJJ39Q=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS7PR11MB7835
X-Proofpoint-GUID: YyPafowxtXHPuE_O5HHBMmGwWapCW-bn
X-Proofpoint-ORIG-GUID: YyPafowxtXHPuE_O5HHBMmGwWapCW-bn
X-Proofpoint-Virus-Version: vendor=baseguard
 engine=ICAP:2.0.254,Aquarius:18.0.957,Hydra:6.0.573,FMLib:17.11.176.26
 definitions=2023-05-30_09,2023-05-30_01,2023-05-22_02
X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 impostorscore=0 adultscore=0
 mlxlogscore=602 clxscore=1015 priorityscore=1501 spamscore=0
 lowpriorityscore=0 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0
 mlxscore=0 classifier=spam adjust=0 reason=mlx scancount=1
 engine=8.12.0-2304280000 definitions=main-2305300104
X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED,
        DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_MSPIKE_H3,
        RCVD_IN_MSPIKE_WL,SPF_HELO_NONE,SPF_PASS,T_SCC_BODY_TEXT_LINE,
        URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
        lindbergh.monkeyblade.net
Precedence: bulk
List-ID: <linux-bluetooth.vger.kernel.org>
X-Mailing-List: linux-bluetooth@vger.kernel.org

The following commit is needed to harden against CVE-2023-2002:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=000c2fa2c144c499c881a101819cf1936a1f7cf2

Ruihan Li (1):
  bluetooth: Add cmd validity checks at the start of hci_sock_ioctl()

 net/bluetooth/hci_sock.c | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)


base-commit: f53660ec669f60c772fdf7d75d1c24d288547cee
-- 
2.40.1