diff options
| author | Harald Freudenberger <freude@linux.ibm.com> | 2026-07-23 11:54:52 +0200 |
|---|---|---|
| committer | Vasily Gorbik <gor@linux.ibm.com> | 2026-07-31 13:31:19 +0200 |
| commit | 983279d7f86ade73db86f886e09172dd567031b5 (patch) | |
| tree | 28feb242b770e78bee9ddb4587ef671454bb7178 /Documentation/devicetree/bindings/security/git@git.tavy.me:linux-stable.git | |
| parent | 36b230835b8a008266aad22168ca52afacc8a58d (diff) | |
s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs
There is a wrong upper limit check for the domain value when an EP11
CPRB is processed for sending to a crypto card. This check is only
active on custom device nodes but may lead to access heap memory
behind perms->adm when an administrative CPRB is sent.
Add correct limit (AP_DOMAINS = 256) checking to fix this.
Fixes: cfd68b33094e ("s390/zcrypt: Filter admin CPRBs on custom devices")
Cc: stable@vger.kernel.org
Reviewed-by: Finn Callies <fcallies@linux.ibm.com>
Signed-off-by: Harald Freudenberger <freude@linux.ibm.com>
Signed-off-by: Vasily Gorbik <gor@linux.ibm.com>
Diffstat (limited to 'Documentation/devicetree/bindings/security/git@git.tavy.me:linux-stable.git')
0 files changed, 0 insertions, 0 deletions