Re: Patch for CVE-2016-0774 missing from stable 3.4 and 3.10 kernels

2016-06-04 Thread Greg KH
On Sat, Jun 04, 2016 at 01:33:21PM +0200, Willy Tarreau wrote: > Hi, > > On Mon, Mar 28, 2016 at 04:53:48PM -0700, Jeffrey Vander Stoep wrote: > > https://lkml.org/lkml/2016/2/23/812 "pipe: Fix buffer offset after > > partially failed read" is missing from the stable 3.4.y and 3.10.y > > kernels.

Re: Patch for CVE-2016-0774 missing from stable 3.4 and 3.10 kernels

2016-06-04 Thread Willy Tarreau
Hi, On Mon, Mar 28, 2016 at 04:53:48PM -0700, Jeffrey Vander Stoep wrote: > https://lkml.org/lkml/2016/2/23/812 "pipe: Fix buffer offset after > partially failed read" is missing from the stable 3.4.y and 3.10.y > kernels. It has been included in 3.2.y and 3.14.y. > > I am able to cause a kernel

Re: Patch for CVE-2016-0774 missing from stable 3.4 and 3.10 kernels

2016-03-29 Thread Willy Tarreau
On Mon, Mar 28, 2016 at 04:53:48PM -0700, Jeffrey Vander Stoep wrote: > https://lkml.org/lkml/2016/2/23/812 "pipe: Fix buffer offset after > partially failed read" is missing from the stable 3.4.y and 3.10.y > kernels. It has been included in 3.2.y and 3.14.y. > > I am able to cause a kernel panic

Re: Patch for CVE-2016-0774 missing from stable 3.4 and 3.10 kernels

2016-03-29 Thread Zefan Li
On 2016/3/29 7:53, Jeffrey Vander Stoep wrote: > https://lkml.org/lkml/2016/2/23/812 "pipe: Fix buffer offset after > partially failed read" is missing from the stable 3.4.y and 3.10.y > kernels. It has been included in 3.2.y and 3.14.y. > > I am able to cause a kernel panic without this patch. >