SRU Request submitted:
https://lists.ubuntu.com/archives/kernel-team/2018-March/090520.html
** Description changed:
- Description: qeth: fix L3 next-hop im xmit qeth hdr
+ == SRU Justification ==
+ The current code accesses rtable->rt_gateway without checking that rtable
+ is a valid address. The accidental access to a lowcore area results in a
+ random next-hop address in the qeth_hdr. rtable (or more precisely,
+ skb_dst(skb)) can be NULL in rare cases (for instance together with AF_PACKET
sockets).
- Symptom: wrong destination address in qdio header
+ The solution is to add the missing NULL-ptr checks, which is done by
+ commit ec2c6726322f.
- Problem: The current code accesses rtable->rt_gateway without checking
- that rtable is a valid address. The accidental access to a
- lowcore area results in a random next-hop address in the
- qeth_hdr.
- rtable (or more precisely, skb_dst(skb)) can be NULL in rare
- cases (for instance together with AF_PACKET sockets).
+ Commit ec2c6726322f is in mainline as of v4.13-rc5, so this fix is only
+ needed in Xenial.
- Solution: Add the missing NULL-ptr checks.
- Reproduction: AF_PACKET program sending raw data
+ == Fix ==
+ ec2c6726322f ("s390/qeth: fix L3 next-hop in xmit qeth hdr")
+
+ == Regression Potential ==
+ Low. Limited to s390.
+
+ == Test Case ==
+ A test kernel was built with this patch and tested by the original bug
reporter.
+ The bug reporter states the test kernel resolved the bug.
+
Upstream Commit:
ec2c6726322f0d270bab477e4904bf9496f70ee5
kernel 4.13
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1750813
Title:
qeth: fix L3 next-hop im xmit qeth hdr
Status in Ubuntu on IBM z Systems:
In Progress
Status in linux package in Ubuntu:
Fix Released
Status in linux source package in Xenial:
In Progress
Bug description:
== SRU Justification ==
The current code accesses rtable->rt_gateway without checking that rtable
is a valid address. The accidental access to a lowcore area results in a
random next-hop address in the qeth_hdr. rtable (or more precisely,
skb_dst(skb)) can be NULL in rare cases (for instance together with AF_PACKET
sockets).
The solution is to add the missing NULL-ptr checks, which is done by
commit ec2c6726322f.
Commit ec2c6726322f is in mainline as of v4.13-rc5, so this fix is
only needed in Xenial.
== Fix ==
ec2c6726322f ("s390/qeth: fix L3 next-hop in xmit qeth hdr")
== Regression Potential ==
Low. Limited to s390.
== Test Case ==
A test kernel was built with this patch and tested by the original bug
reporter.
The bug reporter states the test kernel resolved the bug.
Upstream Commit:
ec2c6726322f0d270bab477e4904bf9496f70ee5
kernel 4.13
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/1750813/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
