Fix the SELinux netlink_send hook to properly handle multiple netlink
messages in a single sk_buff; each message is parsed and subject to
SELinux access control. Prior to this patch, SELinux only inspected
the first message in the sk_buff.
CVE: CVE-2020-0255
Cc: stable@vger.kernel.org
Reported-by: Dmitry Vyukov <dvyukov@google.com>
Reviewed-by: Stephen Smalley <stephen.smalley.work@gmail.com>
Change-Id: I5ee398e6d32452d2dd5766caf82a45782527a702
Signed-off-by: Paul Moore <paul@paul-moore.com>
Paul Moore
767086f959