[SRU][B/F][PATCH 0/1] CVE-2021-3669

Yuxuan Luo yuxuan.luo at canonical.com
Fri Feb 17 17:13:47 UTC 2023


[Impact]
A flaw was found in the Linux kernel. Measuring usage of the shared memory
does not scale with large shared memory segment counts which could lead to
resource exhaustion and DoS.

[Backport]
For Bionic, there is a conflict on the condition of the for loop statement
which a variable introduced at the commit
5ac893b8cb10fe2a47a77780d37f9bf5b142854b is expected. It is fine to ignore this
conflict since the new introduced variable will not be used in the fix commit.
Also, the `ipc_get_maxidx()` function should be changed to `ipc_get_maxid()`
since the newer function yet to be introduced until
27c331a174614208d0b539019583990967ad9479 which is a trivial and tricky commit;
therefore, I decided not to cherry pick these commit but use the
`ipc_get_maxid()` instead.
For Focal, it is a clean cherry.

[Test]
Compile and smoke tested on kvm.

[Potential Regression]
Expecting low risk since the optimized logic relies on an existed function and
all the changes is not beyond the scope of the erroneous function.

Rafael Aquini (1):
  ipc: replace costly bailout check in sysvipc_find_ipc()

 ipc/util.c | 16 ++++------------
 1 file changed, 4 insertions(+), 12 deletions(-)

-- 
2.34.1




More information about the kernel-team mailing list