Received-SPF: pass (google.com: domain of linux-bluetooth-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
From:   Dragos-Marian Panait <dragos.panait@windriver.com>
To:     stable@vger.kernel.org
Cc:     Ruihan Li <lrh2000@pku.edu.cn>,
        Marcel Holtmann <marcel@holtmann.org>,
        Luiz Augusto von Dentz <luiz.von.dentz@intel.com>,
        Johan Hedberg <johan.hedberg@gmail.com>,
        Paolo Abeni <pabeni@redhat.com>,
        "David S . Miller" <davem@davemloft.net>,
        Eric Dumazet <edumazet@google.com>,
        Jakub Kicinski <kuba@kernel.org>, netdev@vger.kernel.org,
        linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org
Subject: [PATCH 4.19 0/1] Hardening against CVE-2023-2002
Date:   Tue, 30 May 2023 15:57:30 +0300
Message-Id: <20230530125731.253442-1-dragos.panait@windriver.com>
Content-Transfer-Encoding: 8bit
Content-Type: text/plain
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?Cf21LN7vmO142/5rQMu3xLO1ZMwbWb1jZ0rg1p6NTFsNJNFpjWoPqR86ubG9?=
 =?us-ascii?Q?frdk3NuJ9BDoQRQwARW7OhrfcZZSnqk/vNQuGbNIwupyGPQFLlQEFqf+MdFq?=
 =?us-ascii?Q?PXie1100EC86FFXlu06qAO4fFb+ldMeEOkPoukSTeGRv+a/ZJ5DJL2SAFXq+?=
 =?us-ascii?Q?mOr0Rdy1k31yMFpkEncz97Os/UtqkWAenAsj40nw8yCmTGrMeeyvcmIPDQmO?=
 =?us-ascii?Q?ZKr7oJberN3eOB63frqHVotMMr4WFH4L/5r1Pgo7EsKp53SW3sZblXlVUAq+?=
 =?us-ascii?Q?qD7xgRCLa98Pgf6K2VwXwWUkTmNQ/DNP8eR5rV/dnqMRSJn56Ia2tQNJqJqo?=
 =?us-ascii?Q?Fhpga6Jbsqw4rSGCKJTrLmhafVysD7PIWdhXaasOko//yejCqiOXBbsmvGMe?=
 =?us-ascii?Q?pCrU4KwSP1CyD0Wr4ahHlSt+gBM0hb9vxcZ1IsmnHEIxvWuiCUmB2PdaSDZh?=
 =?us-ascii?Q?M4MlMc82Ishwptthbmk8rsJLmuZuGXOVqIJijntUphBXKw5VZ528HWeQhB0q?=
 =?us-ascii?Q?xppdtrBViWhkYEVgoWZZxscZNfDyJNUYvWHTUHasAlNdkT0vTLDNCu02ii9C?=
 =?us-ascii?Q?Tk7XPcEzZiplTC+ouDAPhnDu724MweQCHDWJn7PZNiKrU+zkI9aJo7sEarTc?=
 =?us-ascii?Q?YOrEvkVdRFa/TXIqVx0k3aGn/FjNa0ZK2bgNzvnXOqU0rrsM6ZibuZrP7s/R?=
 =?us-ascii?Q?SMq+8OGjEvTLQ1CLCeoSINe3qdrKn1CtzhFzaQ/6RDn77/RHFX9mFFJPzsc4?=
 =?us-ascii?Q?rV4xcZjOSqeo1QJgLSsg4Ux0P6k9iVR4BvyA6fn9y8rXR/gl7E/uN8vWEo5/?=
 =?us-ascii?Q?FJb1XKeM2ouEpCJDeQh1EWic/7qAX/HHPwzVLMCaP5TmU5RfCfh93Fbtp7TK?=
 =?us-ascii?Q?92kr1FwAXbxX8c2/JSoqvu1Zh502ILhfgIFne0xqeJHDQVl2CSZOB3cun1iz?=
 =?us-ascii?Q?8XwQWnTs49Rd0eOiPAZKW74x31Htw42F2tJA/hTToA+WcwI2oLI/20mIgjh7?=
 =?us-ascii?Q?x6eDa71OoOgvvF6Skinxi4Q1i/Whv7d9ro+R2PQGJJ90npQnCwFvWlkhfx3p?=
 =?us-ascii?Q?ICcAsW9mScHTdy6E7UZZrHUJjOyyHyJIPy0y64uFqOF/SeDASHj6fBk+M72a?=
 =?us-ascii?Q?Feg9QECPDCe9FaJwtnpvUYNhofO/5i4BvNgSG0RTjaktaEyVM2P6rw9v2+1M?=
 =?us-ascii?Q?AGvcwxQsTh+wg1cLQaZxblrd5WMfQ0yCXpKDmpV1WHJ0jB4vuxNXbekCIWAO?=
 =?us-ascii?Q?L80kUOOCXnH2Gu6TXohf/uT30+W1L7zCSd5ZwQO5Ce3Ra5h/yibcKwRrMryG?=
 =?us-ascii?Q?o0N30oXYHX/wIq2SXkjFk3zLV0m7ENfhUZTFkLU9x3YiBzijXgv3FwmpJyzj?=
 =?us-ascii?Q?71F/NWZOJV7w0BYUdY5c1dxBHWHjXbe+TjMcrnbT82q1C0mkqbwRyi0Dv/OG?=
 =?us-ascii?Q?ztQm+qiF5FHRmuF+viEFVNMc/8JgMXE9cZcfwhDZrGu54PuG8mpEjICyWWh2?=
 =?us-ascii?Q?tkwhbArgwDblQo5accANcIvf7JmmO8fAQQNLBSUJX/YFDBt0lAPhETI4Vh01?=
 =?us-ascii?Q?ufJTfntQ8ga9umr3gWRDjAZqI5JQ/wibHoGLtT5Tg161rCgQvb/kuFYbnUvV?=
 =?us-ascii?Q?4g=3D=3D?=
X-OriginatorOrg: windriver.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 783c67c4-0848-470c-c996-08db610d761c
X-MS-Exchange-CrossTenant-AuthSource: PH0PR11MB4952.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 May 2023 12:57:45.1441
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 8ddb2873-a1ad-4a18-ae4e-4644631433be
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: g+s/IaDMPmyDYJoLBLkr/x0+hgvupbz/i4EkaevPGRGScMf+Xcd0Si+toJnJ8Prl9LzwcwTwrtaJVO1YQ01raYQVoduOk+jCmg/Q2KV+s4U=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH8PR11MB6562
X-Proofpoint-GUID: M6BtJHeaN-yWPxTLY0RWB6aVAY85vSa-
X-Proofpoint-ORIG-GUID: M6BtJHeaN-yWPxTLY0RWB6aVAY85vSa-
X-Proofpoint-Virus-Version: vendor=baseguard
 engine=ICAP:2.0.254,Aquarius:18.0.957,Hydra:6.0.573,FMLib:17.11.176.26
 definitions=2023-05-30_09,2023-05-30_01,2023-05-22_02
X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 mlxlogscore=602 spamscore=0
 phishscore=0 bulkscore=0 priorityscore=1501 suspectscore=0 mlxscore=0
 malwarescore=0 lowpriorityscore=0 impostorscore=0 clxscore=1015
 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1
 engine=8.12.0-2304280000 definitions=main-2305300105
X-Spam-Status: No, score=-2.8 required=5.0 tests=BAYES_00,DKIM_SIGNED,
        DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_LOW,
        RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL,SPF_HELO_NONE,SPF_PASS,
        T_SCC_BODY_TEXT_LINE,URIBL_BLOCKED autolearn=ham autolearn_force=no
        version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
        lindbergh.monkeyblade.net
Precedence: bulk
List-ID: <linux-bluetooth.vger.kernel.org>
X-Mailing-List: linux-bluetooth@vger.kernel.org

The following commit is needed to harden against CVE-2023-2002:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=000c2fa2c144c499c881a101819cf1936a1f7cf2

Ruihan Li (1):
  bluetooth: Add cmd validity checks at the start of hci_sock_ioctl()

 net/bluetooth/hci_sock.c | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)


base-commit: 3f57fb8b1bd06b277556601133823bec370d723f
-- 
2.40.1