s390/ptrace: fix PSW mask check
authorMartin Schwidefsky <schwidefsky@de.ibm.com>
Mon, 23 Jun 2014 13:29:40 +0000 (15:29 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 31 Jul 2014 19:53:52 +0000 (12:53 -0700)
commita940d7b23bc073c774f3733c79f82102ffccff4e
treea7a0442f16279c3f93bb2887ecea382cbf586081
parente1d8240bdd4d65dd1de6eda2b2351ddd2fbb9ca4
s390/ptrace: fix PSW mask check

commit dab6cf55f81a6e16b8147aed9a843e1691dcd318 upstream.

The PSW mask check of the PTRACE_POKEUSR_AREA command is incorrect.
The PSW_MASK_USER define contains the PSW_MASK_ASC bits, the ptrace
interface accepts all combinations for the address-space-control
bits. To protect the kernel space the PSW mask check in ptrace needs
to reject the address-space-control bit combination for home space.

Fixes CVE-2014-3534

Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>
Cc: Ben Hutchings <ben@decadent.org.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
arch/s390/kernel/ptrace.c