[SRU][M/J][PATCH 0/1] CVE-2024-26735

[Bethany Jamison]

[Impact]

 In the Linux kernel, the following vulnerability has been resolved:

 ipv6: sr: fix possible use-after-free and null-ptr-deref

 The pernet operations structure for the subsystem must be registered
 before registering the generic netlink family.

[Fix]

Mantic:	Clean cherry-pick from linux-6.6.y
Jammy:	Mantic patch applied cleanly.
Focal:	pending
Bionic:	fix sent to esm ML
Xenial:	not-affected
Trusty: not-affected

[Test Case]

Compile and boot tested.

[Where problems could occur]

This fix affects those who use IPv6 segment routing when registering
or unregistering a generic netlink family, an issue with this fix
would be visable to the user via data corruption, unpredicted system
behavior, or a system crash.

Vasiliy Kovalev (1):
  ipv6: sr: fix possible use-after-free and null-ptr-deref

 net/ipv6/seg6.c | 20 +++++++++++---------
 1 file changed, 11 insertions(+), 9 deletions(-)

-- 
2.34.1