ACK/APPLIED[B/unstable]: [SRU][T/X/Z/A][PATCH 1/1] dccp: CVE-2017-8824: use-after-free in DCCP code
seth.forshee at canonical.com
Fri Dec 8 21:57:55 UTC 2017
On Fri, Dec 08, 2017 at 03:39:50PM +0100, Kleber Sacilotto de Souza wrote:
> From: Mohamed Ghannam <simo.ghannam at gmail.com>
> Whenever the sock object is in DCCP_CLOSED state,
> dccp_disconnect() must free dccps_hc_tx_ccid and
> dccps_hc_rx_ccid and set to NULL.
> Signed-off-by: Mohamed Ghannam <simo.ghannam at gmail.com>
> Reviewed-by: Eric Dumazet <edumazet at google.com>
> Signed-off-by: David S. Miller <davem at davemloft.net>
> (cherry picked from commit 69c64866ce072dea1d1e59a0d61e0f66c0dffb76 linux-next)
> Signed-off-by: Kleber Sacilotto de Souza <kleber.souza at canonical.com>
Acked-by: Seth Forshee <seth.forshee at canonical.com>
Applied to bionic and unstable.
More information about the kernel-team