[PATCH 0/5][Trusty][CVE-2016-2069] Race condition in arch/x86/mm/tlb.c

Luis Henriques luis.henriques at canonical.com
Tue May 10 14:06:44 UTC 2016


On Tue, May 10, 2016 at 02:48:00PM +0100, Luis Henriques wrote:
> Following this email I am sending the backport of the fix for
> CVE-2016-2069.  This backport is based on a backport I've done before for
> the stable 3.16 (hence the comment in the commit summary referring to this
> kernel version).
> 
> This CVE is fixed in all the other ubuntu kernels, only Trusty is missing
> it.
> 
> Obviously, the actual fix is just the 1st patch; I'm sending the 2nd for
> completeness.
>

I've managed to screw-up the subject lines.  There are only 2 patches in
this thread, not 5.

Cheers,
--
Luís


> Andy Lutomirski (2):
>   x86/mm: Add barriers and document switch_mm()-vs-flush synchronization
>   x86/mm: Improve switch_mm() barrier comments
> 
> Jason Gunthorpe (1):
>   IB/security: Restrict use of the write() interface
> 
> Kangjie Lu (2):
>   net: fix infoleak in llc
>   net: fix infoleak in rtnetlink
> 
>  arch/x86/include/asm/mmu_context.h       | 33 +++++++++++++++++++++++++++++++-
>  arch/x86/mm/tlb.c                        | 25 +++++++++++++++++++++---
>  drivers/infiniband/core/ucm.c            |  4 ++++
>  drivers/infiniband/core/ucma.c           |  3 +++
>  drivers/infiniband/core/uverbs_main.c    |  5 +++++
>  drivers/infiniband/hw/qib/qib_file_ops.c |  5 +++++
>  include/rdma/ib.h                        | 16 ++++++++++++++++
>  net/core/rtnetlink.c                     | 18 +++++++++--------
>  net/llc/af_llc.c                         |  1 +
>  9 files changed, 98 insertions(+), 12 deletions(-)
> 
> 
> -- 
> kernel-team mailing list
> kernel-team at lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/kernel-team




More information about the kernel-team mailing list