From: Hannes Frederic Sowa <han...@stressinduktion.org> Date: Thu, 08 Dec 2016 15:04:17 +0100
> Hello David, > > On Mon, Nov 28, 2016, at 22:13, David Miller wrote: >> From: David Ahern <d...@cumulusnetworks.com> >> Date: Sun, 27 Nov 2016 18:52:53 -0800 >> >> > Andrey reported the following while fuzzing the kernel with syzkaller: >> ... >> > icmp6_send / icmpv6_send is invoked for both rx and tx paths. In both >> > cases the dst->dev should be preferred for determining the L3 domain >> > if the dst has been set on the skb. Fallback to the skb->dev if it has >> > not. This covers the case reported here where icmp6_send is invoked on >> > Rx before the route lookup. >> > >> > Fixes: 5d41ce29e ("net: icmp6_send should use dst dev to determine L3 >> > domain") >> > Reported-by: Andrey Konovalov <andreyk...@google.com> >> > Signed-off-by: David Ahern <d...@cumulusnetworks.com> >> >> Applied, thanks David. > > could you queue this patch up for stable. You can remotely kill machines > with this bug. Sure, queued up, thanks.