Rejected/Cmnt: [SRU][K/J/F] CVE-2022-3625

[Stefan Bader]

On 11.11.22 16:39, Yuxuan Luo wrote:
> [Impact]
> After a failed devlink reload, devlink parameters are still registered,
> which means user space can set and get their values. In the case of the
> mlxsw "acl_region_rehash_interval" parameter, these operations will
> trigger a use-after-free.
> 
> [Backport]
> It is a clean backport for Kinetic, Jammy and Focal.
> 
> [Potential Regression]
> There is no potential regression.
> 
> Ido Schimmel (1):
>    devlink: Fix use-after-free after a failed reload
> 
>   net/core/devlink.c | 4 ++--
>   1 file changed, 2 insertions(+), 2 deletions(-)
> 

Patch is applied/released for Kinetic: Ubuntu-5.19.0-16.16
Patch is applied/pending release for Jammy: Ubuntu-5.15.0-53.59 (v5.15.63)
Patch is applied/pending release for Focal: Ubuntu-5.4.0-132.148 (v5.4.211)

-Stefan

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20221115/39e45c98/attachment.sig>