[PATCH 0/2][CVE-2016-3841] ipv6: add complete rcu protection around np->opt

Luis Henriques luis.henriques at canonical.com
Tue Aug 16 13:46:39 UTC 2016


Following this email I'm sending CVE-2016-3841 fix backports for Vivid and
Trusty kernels.  The backports are simple context adjustments.

Eric Dumazet (1):
  ipv6: add complete rcu protection around np->opt

 include/linux/ipv6.h             |  2 +-
 include/net/ipv6.h               | 21 ++++++++++++++++++++-
 net/dccp/ipv6.c                  | 33 +++++++++++++++++++++------------
 net/ipv6/af_inet6.c              | 13 +++++++++----
 net/ipv6/datagram.c              |  4 +++-
 net/ipv6/exthdrs.c               |  3 ++-
 net/ipv6/inet6_connection_sock.c | 11 ++++++++---
 net/ipv6/ipv6_sockglue.c         | 36 ++++++++++++++++++++++++------------
 net/ipv6/raw.c                   |  8 ++++++--
 net/ipv6/syncookies.c            |  2 +-
 net/ipv6/tcp_ipv6.c              | 28 +++++++++++++++++-----------
 net/ipv6/udp.c                   |  8 ++++++--
 net/l2tp/l2tp_ip6.c              |  8 ++++++--
 13 files changed, 124 insertions(+), 53 deletions(-)





More information about the kernel-team mailing list