[PATCH 00/11] [lucid/master] CVE-2010-4251 v2
Paolo Pisati
paolo.pisati at canonical.com
Mon Jul 11 14:20:09 UTC 2011
All patches but 4 (ipv4: udp: Optimise multicast reception) are clean cherry-picks from upstream.
Patches 3-5 are not related to this CVE, but 6 depends on them.
Tested on a lucid qemu image: boot test plus an entire system `apt-get upgrade`.
Eric Dumazet (3):
ipv6: udp: Optimise multicast reception
ipv4: udp: Optimise multicast reception
udp: multicast RX should increment SNMP/sk_drops counter in
allocation failures CVE-2010-4251
Zhu Yi (8):
net: add limit for socket backlog CVE-2010-4251
tcp: use limited socket backlog CVE-2010-4251
udp: use limited socket backlog CVE-2010-4251
llc: use limited socket backlog CVE-2010-4251
sctp: use limited socket backlog CVE-2010-4251
tipc: use limited socket backlog CVE-2010-4251
x25: use limited socket backlog CVE-2010-4251
net: backlog functions rename CVE-2010-4251
include/net/sock.h | 17 +++++++-
net/core/sock.c | 16 +++++++-
net/dccp/minisocks.c | 2 +-
net/ipv4/tcp_ipv4.c | 6 ++-
net/ipv4/tcp_minisocks.c | 2 +-
net/ipv4/udp.c | 92 ++++++++++++++++++++++++++++++++--------------
net/ipv6/tcp_ipv6.c | 6 ++-
net/ipv6/udp.c | 89 +++++++++++++++++++++++++++++++-------------
net/llc/llc_c_ac.c | 2 +-
net/llc/llc_conn.c | 3 +-
net/sctp/input.c | 42 +++++++++++++-------
net/sctp/socket.c | 3 +
net/tipc/socket.c | 6 ++-
net/x25/x25_dev.c | 2 +-
14 files changed, 204 insertions(+), 84 deletions(-)
--
1.7.5.4
More information about the kernel-team
mailing list