SRU Request submitted:
https://lists.ubuntu.com/archives/kernel-team/2018-March/090520.html
** Description changed:
- Description: qeth: fix L3 next-hop im xmit qeth hdr
+ == SRU Justification ==
+ The current code accesses rtable->rt_gateway without checking that rtable
+ is a valid address. The accidental access to a lowcore area results in a
+ random next-hop address in the qeth_hdr. rtable (or more precisely,
+ skb_dst(skb)) can be NULL in rare cases (for instance together with AF_PACKET
sockets).
- Symptom: wrong destination address in qdio header
+ The solution is to add the missing NULL-ptr checks, which is done by
+ commit ec2c6726322f.
- Problem: The current code accesses rtable->rt_gateway without checking
- that rtable is a valid address. The accidental access to a
- lowcore area results in a random next-hop address in the
- qeth_hdr.
- rtable (or more precisely, skb_dst(skb)) can be NULL in rare
- cases (for instance together with AF_PACKET sockets).
+ Commit ec2c6726322f is in mainline as of v4.13-rc5, so this fix is only
+ needed in Xenial.
- Solution: Add the missing NULL-ptr checks.
- Reproduction: AF_PACKET program sending raw data
+ == Fix ==
+ ec2c6726322f ("s390/qeth: fix L3 next-hop in xmit qeth hdr")
+
+ == Regression Potential ==
+ Low. Limited to s390.
+
+ == Test Case ==
+ A test kernel was built with this patch and tested by the original bug
reporter.
+ The bug reporter states the test kernel resolved the bug.
+
Upstream Commit:
ec2c6726322f0d270bab477e4904bf9496f70ee5
kernel 4.13
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1750813
Title:
qeth: fix L3 next-hop im xmit qeth hdr
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/1750813/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs