ACK: [SRU Focal,Jammy,OEM-6.1,Lunar,Mantic 0/1] CVE-2023-42756

[Stefan Bader]

On 29.09.23 00:58, Thadeu Lima de Souza Cascardo wrote:
> [Impact]
> An unprivileged user may trigger a race condition in the netfilter ipset
> subsystem, leading to a local denial of service.
> 
> [Test case]
> A PoC was tested and reliably triggered a crash. After the fix, no crash
> is observed anymore.
> 
> [Backport]
> Only focal required a simple context fixup.
> 
> [Potential regression]
> netfilter users using ipsets may find regressions.
> 
> Jozsef Kadlecsik (1):
>    netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
> 
>   net/netfilter/ipset/ip_set_core.c | 12 ++++++++++--
>   1 file changed, 10 insertions(+), 2 deletions(-)
> 

Acked-by: Stefan Bader <stefan.bader at canonical.com>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0xE8675DEECBEECEA3.asc
Type: application/pgp-keys
Size: 44613 bytes
Desc: OpenPGP public key
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20230929/c33735df/attachment-0001.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20230929/c33735df/attachment-0001.sig>