David Howells <[email protected]> wrote:

> From: Dan Carpenter <[email protected]>
> 
> If __key_link_begin() failed then "edit" would be uninitialized.  I've
> added a check to fix that.
> 
> This allows a random user to crash the kernel, though it's quite difficult
> to achieve.  There are three ways it can be done as the user would have to
> cause an error to occur in __key_link():
>
> ...

I forgot to mention, this fixes CVE-2016-4470.

David

Reply via email to