[Kernel-packages] [Bug 1750813] Re: qeth: fix L3 next-hop im xmit qeth hdr
** Changed in: ubuntu-z-systems
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1750813
Title:
qeth: fix L3 next-hop im xmit qeth hdr
Status in Ubuntu on IBM z Systems:
Fix Released
Status in linux package in Ubuntu:
Fix Released
Status in linux source package in Xenial:
Fix Released
Bug description:
== SRU Justification ==
The current code accesses rtable->rt_gateway without checking that rtable
is a valid address. The accidental access to a lowcore area results in a
random next-hop address in the qeth_hdr. rtable (or more precisely,
skb_dst(skb)) can be NULL in rare cases (for instance together with AF_PACKET
sockets).
The solution is to add the missing NULL-ptr checks, which is done by
commit ec2c6726322f.
Commit ec2c6726322f is in mainline as of v4.13-rc5, so this fix is
only needed in Xenial.
== Fix ==
ec2c6726322f ("s390/qeth: fix L3 next-hop in xmit qeth hdr")
== Regression Potential ==
Low. Limited to s390.
== Test Case ==
A test kernel was built with this patch and tested by the original bug
reporter.
The bug reporter states the test kernel resolved the bug.
Upstream Commit:
ec2c6726322f0d270bab477e4904bf9496f70ee5
kernel 4.13
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/1750813/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1750813] Re: qeth: fix L3 next-hop im xmit qeth hdr
This bug was fixed in the package linux - 4.4.0-119.143 --- linux (4.4.0-119.143) xenial; urgency=medium * linux: 4.4.0-119.143 -proposed tracker (LP: #1760327) * Dell XPS 13 9360 bluetooth scan can not detect any device (LP: #1759821) - Revert "Bluetooth: btusb: fix QCA Rome suspend/resume" linux (4.4.0-118.142) xenial; urgency=medium * linux: 4.4.0-118.142 -proposed tracker (LP: #1759607) * Kernel panic with AWS 4.4.0-1053 / 4.4.0-1015 (Trusty) (LP: #1758869) - x86/microcode/AMD: Do not load when running on a hypervisor * CVE-2018-8043 - net: phy: mdio-bcm-unimac: fix potential NULL dereference in unimac_mdio_probe() linux (4.4.0-117.141) xenial; urgency=medium * linux: 4.4.0-117.141 -proposed tracker (LP: #1755208) * Xenial update to 4.4.114 stable release (LP: #1754592) - x86/asm/32: Make sync_core() handle missing CPUID on all 32-bit kernels - usbip: prevent vhci_hcd driver from leaking a socket pointer address - usbip: Fix implicit fallthrough warning - usbip: Fix potential format overflow in userspace tools - x86/microcode/intel: Fix BDW late-loading revision check - x86/retpoline: Fill RSB on context switch for affected CPUs - sched/deadline: Use the revised wakeup rule for suspending constrained dl tasks - can: af_can: can_rcv(): replace WARN_ONCE by pr_warn_once - can: af_can: canfd_rcv(): replace WARN_ONCE by pr_warn_once - PM / sleep: declare __tracedata symbols as char[] rather than char - time: Avoid undefined behaviour in ktime_add_safe() - timers: Plug locking race vs. timer migration - Prevent timer value 0 for MWAITX - drivers: base: cacheinfo: fix x86 with CONFIG_OF enabled - drivers: base: cacheinfo: fix boot error message when acpi is enabled - PCI: layerscape: Add "fsl,ls2085a-pcie" compatible ID - PCI: layerscape: Fix MSG TLP drop setting - mmc: sdhci-of-esdhc: add/remove some quirks according to vendor version - fs/select: add vmalloc fallback for select(2) - hwpoison, memcg: forcibly uncharge LRU pages - cma: fix calculation of aligned offset - mm, page_alloc: fix potential false positive in __zone_watermark_ok - ipc: msg, make msgrcv work with LONG_MIN - x86/ioapic: Fix incorrect pointers in ioapic_setup_resources() - ACPI / processor: Avoid reserving IO regions too early - ACPI / scan: Prefer devices without _HID/_CID for _ADR matching - ACPICA: Namespace: fix operand cache leak - netfilter: x_tables: speed up jump target validation - netfilter: arp_tables: fix invoking 32bit "iptable -P INPUT ACCEPT" failed in 64bit kernel - netfilter: nf_dup_ipv6: set again FLOWI_FLAG_KNOWN_NH at flowi6_flags - netfilter: nf_ct_expect: remove the redundant slash when policy name is empty - netfilter: nfnetlink_queue: reject verdict request from different portid - netfilter: restart search if moved to other chain - netfilter: nf_conntrack_sip: extend request line validation - netfilter: use fwmark_reflect in nf_send_reset - ext2: Don't clear SGID when inheriting ACLs - reiserfs: fix race in prealloc discard - reiserfs: don't preallocate blocks for extended attributes - reiserfs: Don't clear SGID when inheriting ACLs - fs/fcntl: f_setown, avoid undefined behaviour - scsi: libiscsi: fix shifting of DID_REQUEUE host byte - Input: trackpoint - force 3 buttons if 0 button is reported - usb: usbip: Fix possible deadlocks reported by lockdep - usbip: fix stub_rx: get_pipe() to validate endpoint number - usbip: fix stub_rx: harden CMD_SUBMIT path to handle malicious input - usbip: prevent leaking socket pointer address in messages - um: link vmlinux with -no-pie - vsyscall: Fix permissions for emulate mode with KAISER/PTI - eventpoll.h: add missing epoll event masks - x86/microcode/intel: Extend BDW late-loading further with LLC size check - hrtimer: Reset hrtimer cpu base proper on CPU hotplug - dccp: don't restart ccid2_hc_tx_rto_expire() if sk in closed state - ipv6: Fix getsockopt() for sockets with default IPV6_AUTOFLOWLABEL - ipv6: fix udpv6 sendmsg crash caused by too small MTU - ipv6: ip6_make_skb() needs to clear cork.base.dst - lan78xx: Fix failure in USB Full Speed - net: igmp: fix source address check for IGMPv3 reports - tcp: __tcp_hdrlen() helper - net: qdisc_pkt_len_init() should be more robust - pppoe: take ->needed_headroom of lower device into account on xmit - r8169: fix memory corruption on retrieval of hardware statistics. - sctp: do not allow the v4 socket to bind a v4mapped v6 address - sctp: return error if the asoc has been peeled off in sctp_wait_for_sndbuf - vmxnet3: repair memory leak - net: Allow neigh contructor functions ability to modify the primary_key - ipv4: Make neigh lookup keys for loopback/point-to-point devices be INADDR_ANY
[Kernel-packages] [Bug 1750813] Re: qeth: fix L3 next-hop im xmit qeth hdr
** Tags removed: verification-needed-xenial
** Tags added: verification-done-xenial
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1750813
Title:
qeth: fix L3 next-hop im xmit qeth hdr
Status in Ubuntu on IBM z Systems:
Fix Committed
Status in linux package in Ubuntu:
Fix Released
Status in linux source package in Xenial:
Fix Committed
Bug description:
== SRU Justification ==
The current code accesses rtable->rt_gateway without checking that rtable
is a valid address. The accidental access to a lowcore area results in a
random next-hop address in the qeth_hdr. rtable (or more precisely,
skb_dst(skb)) can be NULL in rare cases (for instance together with AF_PACKET
sockets).
The solution is to add the missing NULL-ptr checks, which is done by
commit ec2c6726322f.
Commit ec2c6726322f is in mainline as of v4.13-rc5, so this fix is
only needed in Xenial.
== Fix ==
ec2c6726322f ("s390/qeth: fix L3 next-hop in xmit qeth hdr")
== Regression Potential ==
Low. Limited to s390.
== Test Case ==
A test kernel was built with this patch and tested by the original bug
reporter.
The bug reporter states the test kernel resolved the bug.
Upstream Commit:
ec2c6726322f0d270bab477e4904bf9496f70ee5
kernel 4.13
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/1750813/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1750813] Re: qeth: fix L3 next-hop im xmit qeth hdr
This bug is awaiting verification that the kernel in -proposed solves
the problem. Please test the kernel and update this bug with the
results. If the problem is solved, change the tag 'verification-needed-
xenial' to 'verification-done-xenial'. If the problem still exists,
change the tag 'verification-needed-xenial' to 'verification-failed-
xenial'.
If verification is not done by 5 working days from today, this fix will
be dropped from the source code, and this bug will be closed.
See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how
to enable and use -proposed. Thank you!
** Tags added: verification-needed-xenial
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1750813
Title:
qeth: fix L3 next-hop im xmit qeth hdr
Status in Ubuntu on IBM z Systems:
Fix Committed
Status in linux package in Ubuntu:
Fix Released
Status in linux source package in Xenial:
Fix Committed
Bug description:
== SRU Justification ==
The current code accesses rtable->rt_gateway without checking that rtable
is a valid address. The accidental access to a lowcore area results in a
random next-hop address in the qeth_hdr. rtable (or more precisely,
skb_dst(skb)) can be NULL in rare cases (for instance together with AF_PACKET
sockets).
The solution is to add the missing NULL-ptr checks, which is done by
commit ec2c6726322f.
Commit ec2c6726322f is in mainline as of v4.13-rc5, so this fix is
only needed in Xenial.
== Fix ==
ec2c6726322f ("s390/qeth: fix L3 next-hop in xmit qeth hdr")
== Regression Potential ==
Low. Limited to s390.
== Test Case ==
A test kernel was built with this patch and tested by the original bug
reporter.
The bug reporter states the test kernel resolved the bug.
Upstream Commit:
ec2c6726322f0d270bab477e4904bf9496f70ee5
kernel 4.13
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/1750813/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1750813] Re: qeth: fix L3 next-hop im xmit qeth hdr
** Changed in: linux (Ubuntu Xenial)
Status: In Progress => Fix Committed
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1750813
Title:
qeth: fix L3 next-hop im xmit qeth hdr
Status in Ubuntu on IBM z Systems:
Fix Committed
Status in linux package in Ubuntu:
Fix Released
Status in linux source package in Xenial:
Fix Committed
Bug description:
== SRU Justification ==
The current code accesses rtable->rt_gateway without checking that rtable
is a valid address. The accidental access to a lowcore area results in a
random next-hop address in the qeth_hdr. rtable (or more precisely,
skb_dst(skb)) can be NULL in rare cases (for instance together with AF_PACKET
sockets).
The solution is to add the missing NULL-ptr checks, which is done by
commit ec2c6726322f.
Commit ec2c6726322f is in mainline as of v4.13-rc5, so this fix is
only needed in Xenial.
== Fix ==
ec2c6726322f ("s390/qeth: fix L3 next-hop in xmit qeth hdr")
== Regression Potential ==
Low. Limited to s390.
== Test Case ==
A test kernel was built with this patch and tested by the original bug
reporter.
The bug reporter states the test kernel resolved the bug.
Upstream Commit:
ec2c6726322f0d270bab477e4904bf9496f70ee5
kernel 4.13
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/1750813/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1750813] Re: qeth: fix L3 next-hop im xmit qeth hdr
** Changed in: ubuntu-z-systems
Status: In Progress => Fix Committed
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1750813
Title:
qeth: fix L3 next-hop im xmit qeth hdr
Status in Ubuntu on IBM z Systems:
Fix Committed
Status in linux package in Ubuntu:
Fix Released
Status in linux source package in Xenial:
In Progress
Bug description:
== SRU Justification ==
The current code accesses rtable->rt_gateway without checking that rtable
is a valid address. The accidental access to a lowcore area results in a
random next-hop address in the qeth_hdr. rtable (or more precisely,
skb_dst(skb)) can be NULL in rare cases (for instance together with AF_PACKET
sockets).
The solution is to add the missing NULL-ptr checks, which is done by
commit ec2c6726322f.
Commit ec2c6726322f is in mainline as of v4.13-rc5, so this fix is
only needed in Xenial.
== Fix ==
ec2c6726322f ("s390/qeth: fix L3 next-hop in xmit qeth hdr")
== Regression Potential ==
Low. Limited to s390.
== Test Case ==
A test kernel was built with this patch and tested by the original bug
reporter.
The bug reporter states the test kernel resolved the bug.
Upstream Commit:
ec2c6726322f0d270bab477e4904bf9496f70ee5
kernel 4.13
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/1750813/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1750813] Re: qeth: fix L3 next-hop im xmit qeth hdr
SRU Request submitted:
https://lists.ubuntu.com/archives/kernel-team/2018-March/090520.html
** Description changed:
- Description: qeth: fix L3 next-hop im xmit qeth hdr
+ == SRU Justification ==
+ The current code accesses rtable->rt_gateway without checking that rtable
+ is a valid address. The accidental access to a lowcore area results in a
+ random next-hop address in the qeth_hdr. rtable (or more precisely,
+ skb_dst(skb)) can be NULL in rare cases (for instance together with AF_PACKET
sockets).
- Symptom: wrong destination address in qdio header
+ The solution is to add the missing NULL-ptr checks, which is done by
+ commit ec2c6726322f.
- Problem: The current code accesses rtable->rt_gateway without checking
- that rtable is a valid address. The accidental access to a
- lowcore area results in a random next-hop address in the
- qeth_hdr.
- rtable (or more precisely, skb_dst(skb)) can be NULL in rare
- cases (for instance together with AF_PACKET sockets).
+ Commit ec2c6726322f is in mainline as of v4.13-rc5, so this fix is only
+ needed in Xenial.
- Solution: Add the missing NULL-ptr checks.
- Reproduction: AF_PACKET program sending raw data
+ == Fix ==
+ ec2c6726322f ("s390/qeth: fix L3 next-hop in xmit qeth hdr")
+
+ == Regression Potential ==
+ Low. Limited to s390.
+
+ == Test Case ==
+ A test kernel was built with this patch and tested by the original bug
reporter.
+ The bug reporter states the test kernel resolved the bug.
+
Upstream Commit:
ec2c6726322f0d270bab477e4904bf9496f70ee5
kernel 4.13
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1750813
Title:
qeth: fix L3 next-hop im xmit qeth hdr
Status in Ubuntu on IBM z Systems:
In Progress
Status in linux package in Ubuntu:
Fix Released
Status in linux source package in Xenial:
In Progress
Bug description:
== SRU Justification ==
The current code accesses rtable->rt_gateway without checking that rtable
is a valid address. The accidental access to a lowcore area results in a
random next-hop address in the qeth_hdr. rtable (or more precisely,
skb_dst(skb)) can be NULL in rare cases (for instance together with AF_PACKET
sockets).
The solution is to add the missing NULL-ptr checks, which is done by
commit ec2c6726322f.
Commit ec2c6726322f is in mainline as of v4.13-rc5, so this fix is
only needed in Xenial.
== Fix ==
ec2c6726322f ("s390/qeth: fix L3 next-hop in xmit qeth hdr")
== Regression Potential ==
Low. Limited to s390.
== Test Case ==
A test kernel was built with this patch and tested by the original bug
reporter.
The bug reporter states the test kernel resolved the bug.
Upstream Commit:
ec2c6726322f0d270bab477e4904bf9496f70ee5
kernel 4.13
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/1750813/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1750813] Re: qeth: fix L3 next-hop im xmit qeth hdr
I built a test kernel with commit ec2c6726322f0d270bab477e4904bf9496f70ee5. The test kernel can be downloaded from: http://kernel.ubuntu.com/~jsalisbury/lp1750813 Can you test this kernel and see if it resolves this bug? Note, to test this kernel, you need to install both the linux-image and linux-image-extra .deb packages. Thanks in advance! -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1750813 Title: qeth: fix L3 next-hop im xmit qeth hdr Status in Ubuntu on IBM z Systems: In Progress Status in linux package in Ubuntu: Fix Released Status in linux source package in Xenial: In Progress Bug description: Description: qeth: fix L3 next-hop im xmit qeth hdr Symptom: wrong destination address in qdio header Problem: The current code accesses rtable->rt_gateway without checking that rtable is a valid address. The accidental access to a lowcore area results in a random next-hop address in the qeth_hdr. rtable (or more precisely, skb_dst(skb)) can be NULL in rare cases (for instance together with AF_PACKET sockets). Solution: Add the missing NULL-ptr checks. Reproduction: AF_PACKET program sending raw data Upstream Commit: ec2c6726322f0d270bab477e4904bf9496f70ee5 kernel 4.13 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1750813/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1750813] Re: qeth: fix L3 next-hop im xmit qeth hdr
** Changed in: ubuntu-z-systems Status: Triaged => In Progress -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1750813 Title: qeth: fix L3 next-hop im xmit qeth hdr Status in Ubuntu on IBM z Systems: In Progress Status in linux package in Ubuntu: Fix Released Status in linux source package in Xenial: In Progress Bug description: Description: qeth: fix L3 next-hop im xmit qeth hdr Symptom: wrong destination address in qdio header Problem: The current code accesses rtable->rt_gateway without checking that rtable is a valid address. The accidental access to a lowcore area results in a random next-hop address in the qeth_hdr. rtable (or more precisely, skb_dst(skb)) can be NULL in rare cases (for instance together with AF_PACKET sockets). Solution: Add the missing NULL-ptr checks. Reproduction: AF_PACKET program sending raw data Upstream Commit: ec2c6726322f0d270bab477e4904bf9496f70ee5 kernel 4.13 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1750813/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1750813] Re: qeth: fix L3 next-hop im xmit qeth hdr
** Changed in: linux (Ubuntu Xenial) Status: Triaged => In Progress -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1750813 Title: qeth: fix L3 next-hop im xmit qeth hdr Status in Ubuntu on IBM z Systems: Triaged Status in linux package in Ubuntu: Fix Released Status in linux source package in Xenial: In Progress Bug description: Description: qeth: fix L3 next-hop im xmit qeth hdr Symptom: wrong destination address in qdio header Problem: The current code accesses rtable->rt_gateway without checking that rtable is a valid address. The accidental access to a lowcore area results in a random next-hop address in the qeth_hdr. rtable (or more precisely, skb_dst(skb)) can be NULL in rare cases (for instance together with AF_PACKET sockets). Solution: Add the missing NULL-ptr checks. Reproduction: AF_PACKET program sending raw data Upstream Commit: ec2c6726322f0d270bab477e4904bf9496f70ee5 kernel 4.13 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1750813/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1750813] Re: qeth: fix L3 next-hop im xmit qeth hdr
** Also affects: linux (Ubuntu Xenial) Importance: Undecided Status: New ** Changed in: linux (Ubuntu Xenial) Assignee: (unassigned) => Joseph Salisbury (jsalisbury) ** Changed in: linux (Ubuntu Xenial) Importance: Undecided => High ** Changed in: linux (Ubuntu Xenial) Status: New => Triaged ** Changed in: linux (Ubuntu) Status: Triaged => Fix Released ** Changed in: ubuntu-z-systems Status: Invalid => Triaged -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1750813 Title: qeth: fix L3 next-hop im xmit qeth hdr Status in Ubuntu on IBM z Systems: Triaged Status in linux package in Ubuntu: Fix Released Status in linux source package in Xenial: Triaged Bug description: Description: qeth: fix L3 next-hop im xmit qeth hdr Symptom: wrong destination address in qdio header Problem: The current code accesses rtable->rt_gateway without checking that rtable is a valid address. The accidental access to a lowcore area results in a random next-hop address in the qeth_hdr. rtable (or more precisely, skb_dst(skb)) can be NULL in rare cases (for instance together with AF_PACKET sockets). Solution: Add the missing NULL-ptr checks. Reproduction: AF_PACKET program sending raw data Upstream Commit: ec2c6726322f0d270bab477e4904bf9496f70ee5 kernel 4.13 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1750813/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1750813] Re: qeth: fix L3 next-hop im xmit qeth hdr
Commit ec2c6726322f0d2 is in mainline as of v4.13-rc5, so Artful and Bionic already contain the fix. Are you requesting it in Xenial? ** Changed in: linux (Ubuntu) Importance: Undecided => High ** Changed in: linux (Ubuntu) Status: Invalid => Triaged ** Changed in: linux (Ubuntu) Assignee: Skipper Bug Screeners (skipper-screen-team) => Joseph Salisbury (jsalisbury) -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1750813 Title: qeth: fix L3 next-hop im xmit qeth hdr Status in Ubuntu on IBM z Systems: Invalid Status in linux package in Ubuntu: Triaged Bug description: Description: qeth: fix L3 next-hop im xmit qeth hdr Symptom: wrong destination address in qdio header Problem: The current code accesses rtable->rt_gateway without checking that rtable is a valid address. The accidental access to a lowcore area results in a random next-hop address in the qeth_hdr. rtable (or more precisely, skb_dst(skb)) can be NULL in rare cases (for instance together with AF_PACKET sockets). Solution: Add the missing NULL-ptr checks. Reproduction: AF_PACKET program sending raw data Upstream Commit: ec2c6726322f0d270bab477e4904bf9496f70ee5 kernel 4.13 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1750813/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1750813] Re: qeth: fix L3 next-hop im xmit qeth hdr
This is already fix released, as the commit mentioned is in the v4.13+ kernels. Is this a request to backport this to some previous release? Because this is an invalid request for 18.04. ** Changed in: ubuntu-z-systems Status: Triaged => Invalid ** Changed in: linux (Ubuntu) Status: New => Invalid -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1750813 Title: qeth: fix L3 next-hop im xmit qeth hdr Status in Ubuntu on IBM z Systems: Invalid Status in linux package in Ubuntu: Invalid Bug description: Description: qeth: fix L3 next-hop im xmit qeth hdr Symptom: wrong destination address in qdio header Problem: The current code accesses rtable->rt_gateway without checking that rtable is a valid address. The accidental access to a lowcore area results in a random next-hop address in the qeth_hdr. rtable (or more precisely, skb_dst(skb)) can be NULL in rare cases (for instance together with AF_PACKET sockets). Solution: Add the missing NULL-ptr checks. Reproduction: AF_PACKET program sending raw data Upstream Commit: ec2c6726322f0d270bab477e4904bf9496f70ee5 kernel 4.13 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1750813/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1750813] Re: qeth: fix L3 next-hop im xmit qeth hdr
** Also affects: ubuntu-z-systems Importance: Undecided Status: New ** Changed in: ubuntu-z-systems Status: New => Triaged ** Changed in: ubuntu-z-systems Importance: Undecided => High ** Changed in: ubuntu-z-systems Assignee: (unassigned) => Canonical Kernel Team (canonical-kernel-team) -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1750813 Title: qeth: fix L3 next-hop im xmit qeth hdr Status in Ubuntu on IBM z Systems: Triaged Status in linux package in Ubuntu: New Bug description: Description: qeth: fix L3 next-hop im xmit qeth hdr Symptom: wrong destination address in qdio header Problem: The current code accesses rtable->rt_gateway without checking that rtable is a valid address. The accidental access to a lowcore area results in a random next-hop address in the qeth_hdr. rtable (or more precisely, skb_dst(skb)) can be NULL in rare cases (for instance together with AF_PACKET sockets). Solution: Add the missing NULL-ptr checks. Reproduction: AF_PACKET program sending raw data Upstream Commit: ec2c6726322f0d270bab477e4904bf9496f70ee5 kernel 4.13 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1750813/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
