Linux kernel bug fix: IB/mlx5: fix uaccess beyond "count" in debugfs read/write handlers
Subsystem: rdma (drivers/infiniband/hw/mlx5/cong.c)
Bug type: crash, severity: security
Keywords: privilege escalation
Files changed: drivers/infiniband/hw/mlx5/cong.c;drivers/infiniband/hw/mlx5/mr.c
Introduced by Eli Cohen on 2013-07-08 10:32:24 -0700; fixed by Jann Horn on 2018-07-09 13:15:12 -0600 (lifetime: 1827 days)