APPLIED[M/L/J]/Cmnt: [SRU][F/J/L/M][PATCH 0/1] CVE-2023-39189

[Stefan Bader]

On 27.10.23 14:01, Magali Lemes wrote:
> [Impact]
> A flaw was found in the Netfilter subsystem in the Linux kernel. The
> nfnl_osf_add_callback function did not validate the user mode controlled
> opt_num field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to
> trigger an out-of-bounds read, leading to a crash or information disclosure.
> 
> [Backport]
> Clean cherry-pick.
> 
> [Test]
> Compile and boot tested.
> 
> [Regresson potential]
> Affects netfilter passive OS fingerprinting.
> 
> Wander Lairson Costa (1):
>    netfilter: nfnetlink_osf: avoid OOB read
> 
>   net/netfilter/nfnetlink_osf.c | 8 ++++++++
>   1 file changed, 8 insertions(+)
> 
For Focal we just applied this as part of 5.4.247. I just added the CVE 
number to that commit.

Applied to mantic,lunar,jammy:linux/master-next. Thanks.

-Stefan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0xE8675DEECBEECEA3.asc
Type: application/pgp-keys
Size: 44613 bytes
Desc: OpenPGP public key
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20231027/9c1fc415/attachment-0001.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20231027/9c1fc415/attachment-0001.sig>