ACK: [UBUNTU oem-5.14, jammy, oem-5.17, kinetic, oem-6.0, unstable 0/2] CVE-2022-4378

[Tim Gardner]

On 12/12/22 2:05 PM, Thadeu Lima de Souza Cascardo wrote:
> [Impact]
> Unprivileged user could cause stack overflow when writing too many
> whitespaces on a sysctl file. Using user/network namespaces make it possible
> for unprivileged users.
> 
> [Testing]
> A simple script was used to test it. The fix worked on the tested 5.14, 5.15,
> 5.19 and 6.1 kernels.
> 
> [Potential regression]
> Writing to sysctl files may fail or parse incorrectly.
> 
> Linus Torvalds (2):
>    proc: proc_skip_spaces() shouldn't think it is working on C strings
>    proc: avoid integer type confusion in get_proc_long
> 
>   kernel/sysctl.c | 30 +++++++++++++++---------------
>   1 file changed, 15 insertions(+), 15 deletions(-)
> 
Acked-by: Tim Gardner <tim.gardner at canonical.com>
-- 
-----------
Tim Gardner
Canonical, Inc