ACK/Cmnt: [SRU][K/J/F] CVE-2022-3625

[Stefan Bader]

On 11.11.22 16:39, Yuxuan Luo wrote:
> [Impact]
> After a failed devlink reload, devlink parameters are still registered,
> which means user space can set and get their values. In the case of the
> mlxsw "acl_region_rehash_interval" parameter, these operations will
> trigger a use-after-free.
> 
> [Backport]
> It is a clean backport for Kinetic, Jammy and Focal.
> 
> [Potential Regression]
> There is no potential regression.
> 
> Ido Schimmel (1):
>    devlink: Fix use-after-free after a failed reload
> 
>   net/core/devlink.c | 4 ++--
>   1 file changed, 2 insertions(+), 2 deletions(-)
> 

If all 3 changes are cherry picks (and I cannot spot any difference from looking 
at them), why do you not submit the patch once as [SRU K/J/F]?

Acked-by: Stefan Bader <stefan.bader at canonical.com>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20221114/2dffcbe9/attachment-0001.sig>