APPLIED: [SRU Focal/linux-bluefield 0/1] CVE-2023-4004

Bartlomiej Zolnierkiewicz bartlomiej.zolnierkiewicz at canonical.com
Wed Oct 4 14:39:38 UTC 2023


Applied to focal:linux-bluefield/master-next. Thanks.

--
Best regards,
Bartlomiej

On Mon, Sep 25, 2023 at 10:38 AM Thadeu Lima de Souza Cascardo
<cascardo at canonical.com> wrote:
>
> [Impact]
> Unprivileged users can exploit a use-after-free in the pipapo nftables
> set by using unprivileged user namespaces.
>
> [Backport]
> Though this does not affect 5.4 kernels in general, linux-bluefield has
> applied the commit that introduces the vulnerability.
>
> [Potential regression]
> nftables users may regress.
>
> Florian Westphal (1):
>   netfilter: nft_set_pipapo: fix improper element removal
>
>  net/netfilter/nft_set_pipapo.c | 6 +++++-
>  1 file changed, 5 insertions(+), 1 deletion(-)
>



More information about the kernel-team mailing list