tag a5d48566129358e5a4b2eae04e5e1ec82661f1c1
tagger Todd Kjos <tkjos@google.com> Mon Nov 02 16:23:39 2020 -0800
object f3bd93784b29b9e36c92c6917aef6085f2653e3a

https://source.android.com/security/bulletin/2020-11-01
CVE-2020-0423

commit f3bd93784b29b9e36c92c6917aef6085f2653e3a
author David Howells <dhowells@redhat.com> Fri Oct 02 14:04:51 2020 +0100
committer Lee Jones <lee.jones@linaro.org> Mon Nov 02 09:56:20 2020 +0000
tree 3f7d5b5aa985f062092338b579aace4856eb92eb
parent e1d9bac2f3bd10279e6617ef26e0a1780b352cb0

rxrpc: Fix server keyring leak

[ Upstream commit 38b1dc47a35ba14c3f4472138ea56d014c2d609b ]

If someone calls setsockopt() twice to set a server key keyring, the first
keyring is leaked.

Fix it to return an error instead if the server key keyring is already set.

Fixes: 17926a79320a ("[AF_RXRPC]: Provide secure RxRPC sockets for use by userspace and kernel both")
Signed-off-by: David Howells <dhowells@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Lee Jones <lee.jones@linaro.org>
Change-Id: Iab8871c6be4f5c22058c0c65811a0decc46dbde4