Ack: [CVE-2014-2309] ipv6: don't set DST_NOCOUNT for remotely added routes

Seth Forshee seth.forshee at canonical.com
Tue Apr 29 14:31:41 UTC 2014


On Tue, Apr 29, 2014 at 02:31:32PM +0100, Luis Henriques wrote:
> Following this email, there are 2 patches that fix CVE-2014-2309 for
> Precise and for Precise/lts-backport-quantal kernels.
> 
> Backports have been based on upstream backport for the 3.4 kernel
> (http://thread.gmane.org/gmane.linux.kernel/1690581)
> 
> Sabrina Dubroca (1):
>   ipv6: don't set DST_NOCOUNT for remotely added routes
> 
>  net/ipv6/route.c | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)

Ack for both backports.




More information about the kernel-team mailing list