netdev - Re: Use-after-free oops in next-20150204

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <54E8BCA9.4080603@iogearbox.net>
Date:	Sat, 21 Feb 2015 18:13:13 +0100
From:	Daniel Borkmann <daniel@...earbox.net>
To:	Shachar Raindel <raindel@...lanox.com>, Thomas Graf <tgraf@...g.ch>
CC:	"netdev@...r.kernel.org" <netdev@...r.kernel.org>,
	"linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>
Subject: Re: Use-after-free oops in next-20150204 - probably nelink related

On 02/21/2015 04:36 PM, Shachar Raindel wrote:
...
>> This is most likely rhashtable related. The fixes for the
>> use-after-free issues have been merged Feb 6 so they are probably
>> not included in the Feb 04 snapshot that you use.
>>
>> The relevant net-next commits are:
>> commit 020219a69d40a205dad12b0ea1e6a46153793368
>> commit cf52d52f9ccb9966ac019d9f79824195583e3e6c
>> commit 2af4b52988fd4f7ae525fcada29d4db8680033d6
>> commit a5ec68e3b8f2c95ea1a5d23dd543abbe0c8d0624
>
> Most likely so - haven't seen this reproducing so far on next-20150219,
> which contains the relevant commits.

Thanks for double checking!

> BTW, why is there no MAINTAINERS entry for the netlink subsystem?

Well, if in doubt where to send a bug report, then :

   scripts/get_maintainer.pl -f net/netlink/

Make sure to Cc netdev in any case.
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html