Re: [PATCH] nl80211: check for the required netlink attributes presence

2017-09-15 Thread Johannes Berg
On Wed, 2017-09-13 at 00:21 +0200, Vladis Dronov wrote: > nl80211_set_rekey_data() does not check if the required attributes > NL80211_REKEY_DATA_{REPLAY_CTR,KEK,KCK} are present when processing > NL80211_CMD_SET_REKEY_OFFLOAD request. This request can be issued by > users with CAP_NET_ADMIN privil

[PATCH] nl80211: check for the required netlink attributes presence

2017-09-12 Thread Vladis Dronov
nl80211_set_rekey_data() does not check if the required attributes NL80211_REKEY_DATA_{REPLAY_CTR,KEK,KCK} are present when processing NL80211_CMD_SET_REKEY_OFFLOAD request. This request can be issued by users with CAP_NET_ADMIN privilege and may result in NULL dereference and a system crash. Add a