Received-SPF: pass (google.com: domain of linux-bluetooth-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
From:   Dragos-Marian Panait <dragos.panait@windriver.com>
To:     stable@vger.kernel.org
Cc:     Ruihan Li <lrh2000@pku.edu.cn>,
        Marcel Holtmann <marcel@holtmann.org>,
        Luiz Augusto von Dentz <luiz.von.dentz@intel.com>,
        Johan Hedberg <johan.hedberg@gmail.com>,
        Paolo Abeni <pabeni@redhat.com>,
        "David S . Miller" <davem@davemloft.net>,
        Eric Dumazet <edumazet@google.com>,
        Jakub Kicinski <kuba@kernel.org>, netdev@vger.kernel.org,
        linux-bluetooth@vger.kernel.org, linux-kernel@vger.kernel.org
Subject: [PATCH 4.14 0/1] Hardening against CVE-2023-2002
Date:   Tue, 30 May 2023 16:17:39 +0300
Message-Id: <20230530131740.269890-1-dragos.panait@windriver.com>
Content-Transfer-Encoding: 8bit
Content-Type: text/plain
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?V5ZixhYqgHefq3tARBYmjfKMY4mROk1cr1aY0wD3HiVefnSpkUOYH5iriD9B?=
 =?us-ascii?Q?DSZ1vghSi4bn+emODs80U4tkkBuEaMXRnq/9U6cPEB61VrjB0kOuqFUwgFJu?=
 =?us-ascii?Q?2w3MEE6JZLYmCPdBW9XbAqfW3lj3TOpoGuiuHyWqA+9XBnz/c8YDIPuNV4Te?=
 =?us-ascii?Q?o7O6ze+MtkaHAR8R/9+WsqaGgBPJ4Pn24RoJyuRGfWoyC6Agg3TyPnkC/8t4?=
 =?us-ascii?Q?qylCoG75gECTXbQEVafGjMV3sJdyFmkOVspb9e0a4ehOWHI45M5Ob6eD8stn?=
 =?us-ascii?Q?d0m3MGiVTV+PY7kNOf2MI8AEbPQtAiDWKGhR6HXnL0K1s+i776mOc29g9mIF?=
 =?us-ascii?Q?ACv5l9mqJzA0KW7i7t+1svNjQ0wP6X9kEYdhHamSu3Hst5oitDX7gDLw5SBZ?=
 =?us-ascii?Q?lncLehhlj1unR1WTfoqYIXGztVM7udQMu1JvWeXj6MWusb8NZbdR8bM1Ilpa?=
 =?us-ascii?Q?qLXWL7wODMNugOroEM6OfX5FcyhxOrWBQMcUHEOkZ58twoqPxd/FH7OyqWjC?=
 =?us-ascii?Q?/reE0Agy/9a2jaXegA2JKsJVHRqzDzv321FLDB9VPZCi6M5Rjk/zcTT11P1q?=
 =?us-ascii?Q?nFEmDpMzIk2ErWrmuvUrbDqOhc8WvLIEaWNBsGfD0PTfJo3QAYr1b40zLgQD?=
 =?us-ascii?Q?kwL/IRtoDn/rjvolpOE18+fVtyPCzKR9iQt84I5fWQW3mzGLP9x7TM1O116G?=
 =?us-ascii?Q?t6OAE8K/85a6zU7dBwoLZVW517p1KFzRFyTXvQZrUbyWy5QwxFJrrEu67Jaa?=
 =?us-ascii?Q?MjLs3DuVGiu+U2wce5N5qYOmOSmbEJ8Ft5OH5QHFb/0sXBNkim9mOabIyhYc?=
 =?us-ascii?Q?f8t42qSIghcrTnfTNY0kRb7mT8Fh/+O9eyhE3GdxKffh28rCyBOxG+7pga7S?=
 =?us-ascii?Q?b2pCDl0SxxUaAT31Qo8gbZzdMkO3EgPda0EX8G0nkRtGpSoSufGMhtBq56DM?=
 =?us-ascii?Q?4eppIt/oGZ2x2deCYmEregSPXd4U9nvh0t92UmPcQvKA/oSY9GDjC7V7CBkz?=
 =?us-ascii?Q?MoirA8GtB+mykT8Ry1D50ruIvv67GR2smXghjHayGQQybZJAVt7e/7fRWrrB?=
 =?us-ascii?Q?39KvV+dERJd/fjTGa+b70ZyJKJjvHms2W4sXdQvNhBSJjETivsbbUsQOFOEB?=
 =?us-ascii?Q?3UWdi/sqWsGx4LFLfRnS2r8a3H4ziGYooGnIOaeeNP06rv8J2+9PVc3K5DlG?=
 =?us-ascii?Q?Um7k4TxxuxVCRdcIhd9AFs+tkYoV4Ji1FOleHWlxcH9GzdhxgtjKXrU5+wDT?=
 =?us-ascii?Q?+LNVgk9PfphXZMhwLnxcYD7JYdWAGTibVvdTzJTVVNAsrahsXtEkv3Z6Xf0B?=
 =?us-ascii?Q?tlcH5SaRqzbvvuxC1ctx9AuqpXmXlBDMMrqLO2tTDJp6djLgxogz1zjAs8sm?=
 =?us-ascii?Q?SH+PjEN60BJh/aqEqbvMLtRGKtWcmLWUOkQlS4h4DA6VWZkOXloZKimUP4Wf?=
 =?us-ascii?Q?DtID/QvEgYe6+Vq1EmNHDHUiPEVVEyNb5HObFmxRTGoBfMIb1+6CZbd4y4km?=
 =?us-ascii?Q?DyVSrCCk0aTK8Bw7ndhUQxcxVjXRWfObA0hmE1ayNC1SE3iJk38bkVZnenYQ?=
 =?us-ascii?Q?wUSilX3QkONSRsByDZN8cfcJSV+08GGZ+z4gfdziAajwBlNUyqGmwma+q7k+?=
 =?us-ascii?Q?oA=3D=3D?=
X-OriginatorOrg: windriver.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 5d01ad0b-a15e-4265-de8b-08db61104603
X-MS-Exchange-CrossTenant-AuthSource: PH0PR11MB4952.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 May 2023 13:17:52.8353
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 8ddb2873-a1ad-4a18-ae4e-4644631433be
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: AJgQeqZ488nue8eOaqmSCpgkfzgCHOQ+CXQX2Z8aFXa1lqI3RN9189jmulmJth2kZgR/wAtyaklXH7CQwcUPHCFNXWQRb4Hd824wYzqX2UE=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: IA1PR11MB7366
X-Proofpoint-ORIG-GUID: x4cIq-HlchNO5g6enZOcraIxMFw9FT8J
X-Proofpoint-GUID: x4cIq-HlchNO5g6enZOcraIxMFw9FT8J
X-Proofpoint-Virus-Version: vendor=baseguard
 engine=ICAP:2.0.254,Aquarius:18.0.957,Hydra:6.0.573,FMLib:17.11.176.26
 definitions=2023-05-30_10,2023-05-30_01,2023-05-22_02
X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 lowpriorityscore=0
 clxscore=1015 malwarescore=0 bulkscore=0 mlxlogscore=602 impostorscore=0
 suspectscore=0 adultscore=0 phishscore=0 spamscore=0 priorityscore=1501
 mlxscore=0 classifier=spam adjust=0 reason=mlx scancount=1
 engine=8.12.0-2304280000 definitions=main-2305300108
X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED,
        DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_MSPIKE_H3,
        RCVD_IN_MSPIKE_WL,SPF_HELO_NONE,SPF_PASS,T_SCC_BODY_TEXT_LINE,
        URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
        lindbergh.monkeyblade.net
Precedence: bulk
List-ID: <linux-bluetooth.vger.kernel.org>
X-Mailing-List: linux-bluetooth@vger.kernel.org

The following commit is needed to harden against CVE-2023-2002:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=000c2fa2c144c499c881a101819cf1936a1f7cf2

Ruihan Li (1):
  bluetooth: Add cmd validity checks at the start of hci_sock_ioctl()

 net/bluetooth/hci_sock.c | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)


base-commit: b3f141a5bc7f877e96528dd31a139854ec4d6017
-- 
2.40.1