mbox series

[0/2] backports for slab-out-of-bounds issue in ip6_xmit()

Message ID 20201230193323.2133009-1-surenb@google.com
Headers show
Series backports for slab-out-of-bounds issue in ip6_xmit() | expand

Message

Suren Baghdasaryan Dec. 30, 2020, 7:33 p.m. UTC
We received a slab-out-of-bounds report in ip6_xmit() for KASAN build on 4.9
kernel. The patches that fix this issue have been backported to to stable 4.14
and one of them even to 3.16 but 4.9 stable branch does not include them.
Backport to linux-4.9.y required trivial merge conflict resolution. They
cleanly apply to linux-stable linux-4.9.y branch tagged v4.9.249.

Paolo Abeni (2):
  net: ipv6: keep sk status consistent after datagram connect failure
  l2tp: fix races with ipv4-mapped ipv6 addresses

 net/ipv6/datagram.c  | 21 +++++++++++++++++----
 net/l2tp/l2tp_core.c | 38 ++++++++++++++++++--------------------
 net/l2tp/l2tp_core.h |  3 ---
 3 files changed, 35 insertions(+), 27 deletions(-)

Comments

Greg Kroah-Hartman Dec. 31, 2020, 9:17 a.m. UTC | #1
On Wed, Dec 30, 2020 at 11:33:21AM -0800, Suren Baghdasaryan wrote:
> We received a slab-out-of-bounds report in ip6_xmit() for KASAN build on 4.9

> kernel. The patches that fix this issue have been backported to to stable 4.14

> and one of them even to 3.16 but 4.9 stable branch does not include them.

> Backport to linux-4.9.y required trivial merge conflict resolution. They

> cleanly apply to linux-stable linux-4.9.y branch tagged v4.9.249.

> 

> Paolo Abeni (2):

>   net: ipv6: keep sk status consistent after datagram connect failure

>   l2tp: fix races with ipv4-mapped ipv6 addresses

> 

>  net/ipv6/datagram.c  | 21 +++++++++++++++++----

>  net/l2tp/l2tp_core.c | 38 ++++++++++++++++++--------------------

>  net/l2tp/l2tp_core.h |  3 ---

>  3 files changed, 35 insertions(+), 27 deletions(-)


Nit, you forgot to sign-off on these patches that you forwarded on.
Next time remember to do that as you did "touch" them :)

I'll go queue them up now.

thanks,

greg k-h
Suren Baghdasaryan Jan. 5, 2021, 4:38 p.m. UTC | #2
On Thu, Dec 31, 2020 at 1:16 AM Greg KH <gregkh@linuxfoundation.org> wrote:
>

> On Wed, Dec 30, 2020 at 11:33:21AM -0800, Suren Baghdasaryan wrote:

> > We received a slab-out-of-bounds report in ip6_xmit() for KASAN build on 4.9

> > kernel. The patches that fix this issue have been backported to to stable 4.14

> > and one of them even to 3.16 but 4.9 stable branch does not include them.

> > Backport to linux-4.9.y required trivial merge conflict resolution. They

> > cleanly apply to linux-stable linux-4.9.y branch tagged v4.9.249.

> >

> > Paolo Abeni (2):

> >   net: ipv6: keep sk status consistent after datagram connect failure

> >   l2tp: fix races with ipv4-mapped ipv6 addresses

> >

> >  net/ipv6/datagram.c  | 21 +++++++++++++++++----

> >  net/l2tp/l2tp_core.c | 38 ++++++++++++++++++--------------------

> >  net/l2tp/l2tp_core.h |  3 ---

> >  3 files changed, 35 insertions(+), 27 deletions(-)

>

> Nit, you forgot to sign-off on these patches that you forwarded on.

> Next time remember to do that as you did "touch" them :)

>

> I'll go queue them up now.


Oops, sorry. Will keep in mind for the next time. Thanks for accepting
the patches.
Suren.

>

> thanks,

>

> greg k-h