linux-kernel - [GIT]: Networking

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date:	Fri, 09 May 2008 03:18:09 -0700 (PDT)
From:	David Miller <davem@...emloft.net>
To:	torvalds@...ux-foundation.org
CC:	akpm@...ux-foundation.org, netdev@...r.kernel.org,
	linux-kernel@...r.kernel.org
Subject: [GIT]: Networking

The SIT bug fix is, unfortunately, remotely exploitable memory leak.
As long as the SIT module is loaded and SIT packets aren't blocked by
the firewall, it's pretty easy to construct a frame that will be
leaked every single time (IPV4 header, with protocol == SIT, and
length just convering the IPV4 header).

I'm queueing that SIT fix up to -stable in parallel as I type this.

The TIPC fix makes sure the is enough header space for all possible
output devices.

Please pull, thanks a lot!

The following changes since commit e46b66bc42b6b1430b04cc5c207ecb2b2f4553dc:
  Ben Hutchings (1):
        net: Added ASSERT_RTNL() to dev_open() and dev_close().

are available in the git repository at:

  master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6.git master

Allan Stephens (1):
      tipc: Increase buffer header to support worst-case device

David S. Miller (1):
      sit: Add missing kfree_skb() on pskb_may_pull() failure.

 net/ipv6/sit.c  |    2 +-
 net/tipc/core.h |   11 +++++------
 2 files changed, 6 insertions(+), 7 deletions(-)
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/