[SRU][J/F][PATCH 0/1] CVE-2024-36901

Vinicius Peixoto vinicius.peixoto at canonical.com
Tue Jul 9 01:02:45 UTC 2024


[Impact]
According to syzbot, there is a chance that ip6_dst_idev()
returns NULL in ip6_output(). Most places in IPv6 stack
deal with a NULL idev just fine, but not here.

[Backport]
Due to the lack of upstream commit 
5e187189ec324f78035d33a4bc123a9c4ca6f3e3 ("net: ip: add skb drop reasons for ip egress path)"
Jammy, Focal, Bionic and Xenial had a context conflict.
Xenial is also missing 97a7a37a7b7b ("ipv6: Initial skb->dev and skb->protocol in ip6_output").
However, none of those commits directly impact the fix or the issue,
so a manual backport is appropriate here.

[Test]
Compile tested.

[Where problems could occur]
Any issues here would directly impact IPv6 networking.

Eric Dumazet (1):
  ipv6: prevent NULL dereference in ip6_output()

 net/ipv6/ip6_output.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

-- 
2.43.0




More information about the kernel-team mailing list