CVE-2014-9900 fix is not upstream

Hi! Digging through some old CVEs I came across this one that doesn't seem be in mainline. Was there a good reason for not being sent upstream? Maybe it was rejected for some reason and I failed to find the discussion. References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9900

net: Zeroing the structure ethtool_wolinfo in ethtool_get_wol()

From: Avijit Kanti Das memset() the structure ethtool_wolinfo that has padded bytes but the padded bytes have not been zeroed out. Change-Id: If3fd2d872a1b1ab9521d937b86a29fc468a8bbfe Signed-off-by: Avijit Kanti Das --- net/core/ethtool.c

[3.16.y-ckt stable] Patch "=?UTF-8?q?veth:=20don=E2=80=99t=20modify=20ip=5Fsummed;=20doing?= =?UTF-8?q?=20so=20treats=20packets=20with=20bad=20checksums=20as=20good.?=" has been added to the 3.16.y-ck

.@vger.kernel.org Signed-off-by: Vijay Pandurangan <vij...@vijayp.ca> Acked-by: Cong Wang <cw...@twopensource.com> Signed-off-by: David S. Miller <da...@davemloft.net> Signed-off-by: Luis Henriques <luis.henriq...@canonical.com> --- drivers/net/veth.c | 6 -- 1 file chan

[PATCH 3.16.y-ckt 002/180] veth: don’t modify ip_summed; doing so treats packets with bad checksums as good.

-by: Vijay Pandurangan <vij...@vijayp.ca> Acked-by: Cong Wang <cw...@twopensource.com> Signed-off-by: David S. Miller <da...@davemloft.net> Signed-off-by: Luis Henriques <luis.henriq...@canonical.com> --- drivers/net/veth.c | 6 -- 1 file changed, 6 deletions(-) diff --git a/drivers/

[PATCH 3.16.y-ckt 047/126] can: Use correct type in sizeof() in nla_put()

error, and this might result in memory corruption. Fix this. Signed-off-by: Marek Vasut <ma...@denx.de> Cc: Wolfgang Grandegger <w...@grandegger.com> Cc: netdev@vger.kernel.org Signed-off-by: Marc Kleine-Budde <m...@pengutronix.de> Signed-off-by: Luis Henriques <luis.henriq...@canonica

[3.16.y-ckt stable] Patch "can: Use correct type in sizeof() in nla_put()" has been added to staging queue

variable, likely due to some copy-paste error, and this might result in memory corruption. Fix this. Signed-off-by: Marek Vasut <ma...@denx.de> Cc: Wolfgang Grandegger <w...@grandegger.com> Cc: netdev@vger.kernel.org Signed-off-by: Marc Kleine-Budde <m...@pengutronix.de> Si

Re: [PATCH stable<3.19] net: handle null iovec pointer in skb_copy_and_csum_datagram_iovec()

On Fri, Oct 23, 2015 at 11:39:46AM +0200, Michal Kubecek wrote: > On Fri, Oct 23, 2015 at 11:22:19AM +0200, Sabrina Dubroca wrote: > > Hello Michal, > > > > 2015-10-23, 10:46:09 +0200, Michal Kubecek wrote: > > > Mainline commit 89c22d8c3b27 ("net: Fix skb csum races when peeking") > > > backport

Re: [PATCH 3.19 and earlier] fib_rules: Fix dump_rules() not to exit early

On Mon, Oct 05, 2015 at 10:29:28AM -0700, Roland Dreier wrote: > From: Roland Dreier > > Backports of 41fc014332d9 ("fib_rules: fix fib rule dumps across > multiple skbs") introduced a regression in "ip rule show" - it ends up > dumping the first rule over and over and

Re: [STABLE] Please backport asix (USB Ethernet) fixes

On Mon, Oct 05, 2015 at 05:09:36PM +0100, Ian Campbell wrote: > Hi David + stable@, > > Please could these two be backported: > 3cc81d85ee01 "asix: Don't reset PHY on if_up for ASIX 88772" > 436c2a5036b6 "asix: Do full reset during ax88772_bind" > > 3cc81d85ee01 was in v3.18-rc1 while

Re: [RFC] [PATCH] net: socket: Fix the wrong returns for recvmsg and sendmsg

On Tue, Jun 02, 2015 at 03:05:57PM +0800, Junling Zheng wrote: On 2015/6/2 14:52, Willy Tarreau wrote: On Tue, Jun 02, 2015 at 02:43:54PM +0800, Junling Zheng wrote: On 2015/6/2 14:27, Greg KH wrote: On Mon, Jun 01, 2015 at 10:23:57PM -0700, David Miller wrote: From: Junling Zheng

[PATCH 3.16.y-ckt 093/144] net: ethernet: pcnet32: Setup the SRAM and NOUFLO on Am79C97{3, 5}

Signed-off-by: Luis Henriques luis.henriq...@canonical.com --- drivers/net/ethernet/amd/pcnet32.c | 31 +-- 1 file changed, 29 insertions(+), 2 deletions(-) diff --git a/drivers/net/ethernet/amd/pcnet32.c b/drivers/net/ethernet/amd/pcnet32.c index e7cc9174e364

Re: [PATCH stable 3.10-3.16] tcp: Fix crash in TCP Fast Open

On Wed, Apr 15, 2015 at 07:00:32PM +0100, Ben Hutchings wrote: Commit 355a901e6cf1 (tcp: make connect() mem charging friendly) changed tcp_send_syn_data() to perform an open-coded copy of the 'syn' skb rather than using skb_copy_expand(). The open-coded copy does not cover the