APPLIED[J]: [SRU][Jammy][OEM-6.1][PATCH 0/2] CVE-2023-6039

[Portia Stephens]

On Mon, Mar 25, 2024 at 6:12 PM Roxana Nicolescu
<roxana.nicolescu at canonical.com> wrote:
>
>
> On 25-03-2024 03:50, Portia Stephens wrote:
> > On Fri, Mar 22, 2024 at 04:05:19PM +0100, Roxana Nicolescu wrote:
> >> On 19/03/2024 22:25, Yuxuan Luo wrote:
> >>> [Impact]
> >>> A use-after-free flaw was found in lan78xx_disconnect in
> >>> drivers/net/usb/lan78xx.c in the network sub-component, net/usb/lan78xx
> >>> in the Linux Kernel. This flaw allows a local attacker to crash the
> >>> system when the LAN78XX USB device detaches. This patch adds the
> >>> follow-up commits needed for the fix.
> >>>
> >>> [Backport]
> >>> They are all clean cherry picks.
> >>>
> >>> [Test]
> >>> Compile and boot tested.
> >>>
> >>> [Where things could go wrong]
> >>> This patch set slightly modified a kernel function which is only used by
> >>> lan78xx since it is backported for its sake. Expect low risk regression
> >>> limited to lan78xx.
> >>>
> >>> Thomas Gleixner (2):
> >>>     timers: Replace BUG_ON()s
> >>>     timers: Silently ignore timers with a NULL function
> >>>
> >>>    kernel/time/timer.c | 66 ++++++++++++++++++++++++++++++++++++++-------
> >>>    1 file changed, 57 insertions(+), 9 deletions(-)
> >>>
> >> Applied to jammy master-next branch. Thanks!
> > This was nack'd by Timo since t oem-6.1 is now EOL.
> >
> >> --
> >> kernel-team mailing list
> >> kernel-team at lists.ubuntu.com
> >> https://lists.ubuntu.com/mailman/listinfo/kernel-team
> I applied it to jammy:linux, not oem-6.1. Wasn't this supposed to be
> applied there as well?

Ah sorry ignore me then.