APPLIED [OEM-5.14, OEM-5.17] Re: [SRU K/J/F/B][PATCH 0/1] Fix regression introduced by CVE-2023-0461 fix

Timo Aaltonen tjaalton at ubuntu.com
Mon Mar 13 14:08:28 UTC 2023


Stefan Bader kirjoitti 3.2.2023 klo 12.57:
> The fix for the CVE pulled in a code snippet which uses some error
> variable which is pre-set to -EADDRINUSE. Some backports drop the
> assignment, others don't. But in either way this causes issues because
> after passing the new check, err is 0 but later on a failing call to
> get_port() needs the pre-assignment because it returns 0/1 and not an
> errno.
> 
> The submitted patch applies to K/J directly and needs some context
> adjustments in F/B.
> 
> Stefan Bader (1):
>    UBUNTU: SAUCE: Fix inet_csk_listen_start after CVE-2023-0461
> 
>   net/ipv4/inet_connection_sock.c | 4 +++-
>   1 file changed, 3 insertions(+), 1 deletion(-)
> 

applied to these oem kernels as well, thanks


-- 
t




More information about the kernel-team mailing list