[CVE-2011-3347] [Oneiric] [PATCH 0/3] be2net packet handling allows possible DOS

Brad Figg brad.figg at canonical.com
Tue Feb 14 21:20:05 UTC 2012


CVE-2011-3347
	Non-member VLAN (virtual LAN) packet handling for interfaces in
	promiscuous mode and also using the be2net driver could allow an attacker
	on the local network to cause a denial of service.

Following this cover-letter are three patches which address this issue. Two
of the three are straight cherry-picks from Linus' tree. The third is a very
minor backport due to the driver having been moved within the kernel tree.

Proposing for Oneiric master.

Ajit Khaparde (1):
  be2net: move to new vlan model

Jiri Pirko (1):
  benet: remove bogus "unlikely" on vlan check

Sathya Perla (1):
  be2net: non-member vlan pkts not received in promiscous mode

 drivers/net/benet/be.h      |    1 -
 drivers/net/benet/be_cmds.c |    6 ++++--
 drivers/net/benet/be_main.c |   41 ++++++++++++++++-------------------------
 3 files changed, 20 insertions(+), 28 deletions(-)

-- 
1.7.5.4




More information about the kernel-team mailing list