netdev - pull request (net): ipsec 2017-11-09

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:   Thu, 9 Nov 2017 02:40:44 +0100
From:   Steffen Klassert <steffen.klassert@...unet.com>
To:     David Miller <davem@...emloft.net>
CC:     Herbert Xu <herbert@...dor.apana.org.au>,
        Steffen Klassert <steffen.klassert@...unet.com>,
        <netdev@...r.kernel.org>
Subject: pull request (net): ipsec 2017-11-09

1) Fix a use after free due to a reallocated skb head.
   From Florian Westphal.

2) Fix sporadic lookup failures on labeled IPSEC.
   From Florian Westphal.

3) Fix a stack out of bounds when a socket policy is applied
   to an IPv6 socket that sends IPv4 packets.

Please pull or let me know if there are problems.

Thanks!

The following changes since commit 74784da82ff74379d0583a3ffe42835888705ac7:

  Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf (2017-11-02 16:52:41 +0900)

are available in the git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec.git master

for you to fetch changes up to c9f3f813d462c72dbe412cee6a5cbacf13c4ad5e:

  xfrm: Fix stack-out-of-bounds read in xfrm_state_find. (2017-11-03 13:02:41 +0100)

----------------------------------------------------------------
Florian Westphal (2):
      xfrm: defer daddr pointer assignment after spi parsing
      xfrm: do unconditional template resolution before pcpu cache check

Steffen Klassert (1):
      xfrm: Fix stack-out-of-bounds read in xfrm_state_find.

 net/xfrm/xfrm_input.c  |  4 +--
 net/xfrm/xfrm_policy.c | 71 +++++++++++++++++++++++++-------------------------
 2 files changed, 37 insertions(+), 38 deletions(-)