[kernel-sec-discuss] r4682 - active

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-11-03 15:41:33 +0000 (Thu, 03 Nov 2016)
New Revision: 4682

Modified:
   active/CVE-2016-crypto-GPF-in-lrw_crypt-caused-by-null-deref
Log:
Add notes for further investigation of the new issue

Modified: active/CVE-2016-crypto-GPF-in-lrw_crypt-caused-by-null-deref
===================================================================
--- active/CVE-2016-crypto-GPF-in-lrw_crypt-caused-by-null-deref	2016-11-03 15:38:58 UTC (rev 4681)
+++ active/CVE-2016-crypto-GPF-in-lrw_crypt-caused-by-null-deref	2016-11-03 15:41:33 UTC (rev 4682)
@@ -1,6 +1,17 @@
 Description: crypto: GPF in lrw_crypt caused by null-deref
 References:
 Notes:
+ carnil> dd504589577d8e8e70f51f997ad487a4cb6c026f is the initial patch
+ carnil> followed by a set of related patches. Possibly related:
+ carnil> dd504589577d8e8e70f51f997ad487a4cb6c026f crypto: algif_skcipher - Require setkey before accept(2)
+ carnil> c840ac6af3f8713a71b4d2363419145760bd6044 crypto: af_alg - Disallow bind/setkey/... after accept(2)
+ carnil> a383292c86663bbc31ac62cc0c04fc77504636a6 crypto: af_alg - Fix socket double-free when accept fails
+ carnil> 37766586c965d63758ad542325a96d5384f4a8c9 crypto: af_alg - Add nokey compatibility path
+ carnil> a0fa2d037129a9849918a92d91b79ed6c7bd2818 crypto: algif_skcipher - Add nokey compatibility path
+ carnil> a5596d6332787fd383b3b5427b41f94254430827 crypto: hash - Add crypto_ahash_has_setkey
+ carnil> 6de62f15b581f920ade22d758f4c338311c2f0d4 crypto: algif_hash - Require setkey before accept(2)
+ carnil> a1383cd86a062fc798899ab20f0ec2116cce39cb crypto: skcipher - Add crypto_skcipher_has_setkey
+ carnil> 6e8d8ecf438792ecf7a3207488fb4eebc4edb040 crypto: algif_skcipher - Add key check exception for cipher_null
 Bugs:
 upstream: released (4.5-rc1) [dd504589577d8e8e70f51f997ad487a4cb6c026f]
 3.16-upstream-stable: