Hi,

Please consider including the following commit in 2.6.32, 3.2 and 3.8
as it fixes CVE-2013-6378 (Greg's stable trees already contain it):

commit a497e47d4aec37aaf8f13509f3ef3d1f6a717d88
Author: Dan Carpenter <[email protected]>
Date:   Wed Oct 30 20:12:51 2013 +0300

    libertas: potential oops in debugfs
    
    If we do a zero size allocation then it will oops.  Also we can't be
    sure the user passes us a NUL terminated string so I've added a
    terminator.
    
    This code can only be triggered by root.
    
    Reported-by: Nico Golde <[email protected]>
    Reported-by: Fabian Yamaguchi <[email protected]>
    Signed-off-by: Dan Carpenter <[email protected]>
    Acked-by: Dan Williams <[email protected]>
    Signed-off-by: John W. Linville <[email protected]>

Cheers,
--
Luis
--
To unsubscribe from this list: send the line "unsubscribe stable" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to