NAK[D]: [SRU][Bionic][Cosmic][Disco][PATCH 0/1] s390/qeth: fix length check in SNMP processing

Seth Forshee seth.forshee at canonical.com
Tue Jan 8 14:14:22 UTC 2019


On Fri, Dec 14, 2018 at 11:48:17AM -0500, Joseph Salisbury wrote:
> BugLink: https://bugs.launchpad.net/bugs/1805802
> 
> == SRU Justification ==
> The response for a SNMP request can consist of multiple parts,
>               which the cmd callback stages into a kernel buffer until all
>               parts have been received. If the callback detects that the
>               staging buffer provides insufficient space, it bails out with
>               error.
>               This processing is buggy for the first part of the response -
>               while it initially checks for a length of 'data_len', it later
>               copies an additional amount of
>               'offsetof(struct qeth_snmp_cmd, data)' bytes.
> 
> 
> == Fix ==
> 9a764c1e5968 ("s390/qeth: fix length check in SNMP processing")
> 
> == Regression Potential ==
> Low.  Changes limited to s390.
> 
> == Test Case ==
> A test kernel was built with this patch and tested by the original bug reporter.
> The bug reporter states the test kernel resolved the bug.

Not needed in disco as it has already come in from upstream stable.
Thanks!



More information about the kernel-team mailing list