[SRU][O/N/J/F][PATCH 0/1] CVE-2024-53164

[benjamin.romer at canonical.com]

On Tue, 2025-01-07 at 17:20 -0800, Ian Whitfield wrote:
> [Impact]
> 
> Changes to sch->q.qlen around qdisc_tree_reduce_backlog() need to happen
> _before_ a call to said function because otherwise it may fail to notify
> parent qdiscs when the child is about to become empty.
> 
> [Backport]
> 
> The patch was applied cleanly.
> 
> [Fix]
> 
> Oracular: backport
> Noble: backport
> Jammy: backport
> Focal: backport
> Bionic:  sent to ESM ML
> Xenial: not affected
> 
> [Test Case]
> 
> Compile and boot tested
> 
> [Where problems could occur]
> 
> This fix affects those who use CAKE or CHOKe for network scheduling. An
> issue with this fix would be visible to the user via unexpected network
> behavior or potentially a use-after-free.
> 
> Lion Ackermann (1):
>   net: sched: fix ordering of qlen adjustment
> 
>  net/sched/sch_cake.c  | 2 +-
>  net/sched/sch_choke.c | 2 +-
>  2 files changed, 2 insertions(+), 2 deletions(-)
> 
> -- 
> 2.43.0
> 
> 

Acked-by: Benjamin M Romer <benjamin.romer at canonical.com>