Re: [PATCH 0/4] [backports] fix l2tp use-after-free in pppol2tp_sendmsg

On Thu, May 21, 2020 at 02:57:00PM +0100, Giuliano Procida wrote:

Hi Greg.

This is for 4.14.

We received a PoC (code to run as root with a KASAN kernel) demonstrating the existence of a use-after-free in pppol2tp_sendmsg. This was accompanied by a patch to resolve it, consisting mostly of parts of patch 3 plus a little of 4.

The following patches all apply cleanly and compile with allmodconfig. However, I lack the hardware to test them.

All now queued up, thanks.

greg k-h