title: netlabel: fix out-of-bounds memory accesses
description: In the Linux kernel, the following vulnerability has been resolved:
netlabel: fix out-of-bounds memory accesses
There are two array out-of-bounds memory accesses, one in
cipso_v4_map_lvl_valid(), the other in netlbl_bitmap_walk().  Both
errors are embarassingly simple, and the fixes are straightforward.
As a FYI for anyone backporting this patch to kernels prior to v4.8,
you'll want to apply the netlbl_bitmap_walk() patch to
cipso_v4_bitmap_walk() as netlbl_bitmap_walk() doesn't exist before
Linux v4.8.
affected:
{
product: Linux
vendor: Linux
defaultStatus: unaffected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions:
version: 446fda4f2682, lessThan: 97bc3683c249, status: affected, versionType: git
version: 446fda4f2682, lessThan: c61d01faa555, status: affected, versionType: git
version: 446fda4f2682, lessThan: dc18101f95fa, status: affected, versionType: git
version: 446fda4f2682, lessThan: 1c973f9c7cc2, status: affected, versionType: git
version: 446fda4f2682, lessThan: fcfe700acdc1, status: affected, versionType: git
version: 446fda4f2682, lessThan: e3713abc4248, status: affected, versionType: git
version: 446fda4f2682, lessThan: fbf9578919d6, status: affected, versionType: git
version: 446fda4f2682, lessThan: 5578de4834fe, status: affected, versionType: git
}
{
product: Linux
vendor: Linux
defaultStatus: affected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions:
version: 2.6.19, status: affected
version: 0, lessThan: 2.6.19, status: unaffected, versionType: custom
version: 3.16.66, lessThanOrEqual: 3.16.*, status: unaffected, versionType: custom
version: 3.18.137, lessThanOrEqual: 3.18.*, status: unaffected, versionType: custom
version: 4.4.177, lessThanOrEqual: 4.4.*, status: unaffected, versionType: custom
version: 4.9.163, lessThanOrEqual: 4.9.*, status: unaffected, versionType: custom
version: 4.14.106, lessThanOrEqual: 4.14.*, status: unaffected, versionType: custom
version: 4.19.28, lessThanOrEqual: 4.19.*, status: unaffected, versionType: custom
version: 4.20.15, lessThanOrEqual: 4.20.*, status: unaffected, versionType: custom
version: 5.0, lessThanOrEqual: *, status: unaffected, versionType: original_commit_for_fix
}
