APPLIED: [SRU HWE-5.17 0/1] CVE-2022-2318

[Stefan Bader]

On 27.09.22 20:41, Cengiz Can wrote:
> [Impact]
> There are use-after-free vulnerabilities caused by timer handler in
> net/rose/rose_timer.c of linux that allow attackers to crash linux
> kernel without any privileges.
> 
> [Fix]
> Cherry picked from upstream.
> 
> [Test case]
> Boot tested on KVM only.
> 
> [Potential regressions]
> Unknown but highly unlikely since the fix is released with other
> kernels months ago.
> 
> Duoming Zhou (1):
>    net: rose: fix UAF bugs caused by timer handler
> 
>   net/rose/rose_timer.c | 34 +++++++++++++++++++---------------
>   1 file changed, 19 insertions(+), 15 deletions(-)
> 

Applied to jammy:linux-hwe-5.17/hwe-5.17-next. Thanks.

-Stefan

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20221005/094e6572/attachment-0001.sig>