[SRU][Xenial][PATCH 0/1] s390/qeth: fix L3 next-hop in xmit qeth hdr
joseph.salisbury at canonical.com
Thu Mar 1 19:01:52 UTC 2018
== SRU Justification ==
The current code accesses rtable->rt_gateway without checking that rtable
is a valid address. The accidental access to a lowcore area results in a
random next-hop address in the qeth_hdr. rtable (or more precisely,
skb_dst(skb)) can be NULL in rare cases (for instance together with AF_PACKET sockets).
The solution is to add the missing NULL-ptr checks, which is done by commit ec2c6726322f.
Commit ec2c6726322f is in mainline as of v4.13-rc5, so this fix is only needed in Xenial.
== Fix ==
ec2c6726322f ("s390/qeth: fix L3 next-hop in xmit qeth hdr")
== Regression Potential ==
Low. Limited to s390.
== Test Case ==
A test kernel was built with this patch and tested by the original bug reporter.
The bug reporter states the test kernel resolved the bug.
Julian Wiedmann (1):
s390/qeth: fix L3 next-hop in xmit qeth hdr
drivers/s390/net/qeth_l3_main.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
More information about the kernel-team