[SRU][Xenial][PATCH 0/1] s390/qeth: fix L3 next-hop in xmit qeth hdr

Joseph Salisbury joseph.salisbury at canonical.com
Thu Mar 1 19:01:52 UTC 2018


BugLink: http://bugs.launchpad.net/bugs/1750813

== SRU Justification ==
The current code accesses rtable->rt_gateway without checking that rtable 
is a valid address. The accidental access to a lowcore area results in a 
random next-hop address in the qeth_hdr.  rtable (or more precisely, 
skb_dst(skb)) can be NULL in rare cases (for instance together with AF_PACKET sockets).

The solution is to add the missing NULL-ptr checks, which is done by commit ec2c6726322f.

Commit ec2c6726322f is in mainline as of v4.13-rc5, so this fix is only needed in Xenial.

== Fix ==
ec2c6726322f ("s390/qeth: fix L3 next-hop in xmit qeth hdr")

== Regression Potential ==
Low.  Limited to s390.

== Test Case ==
A test kernel was built with this patch and tested by the original bug reporter.
The bug reporter states the test kernel resolved the bug.

Julian Wiedmann (1):
  s390/qeth: fix L3 next-hop in xmit qeth hdr

 drivers/s390/net/qeth_l3_main.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

-- 
2.7.4





More information about the kernel-team mailing list