netdev - Regression in macvlan driver in stable release 4.4.209

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:   Mon, 20 Jan 2020 09:17:35 +0000
From:   "Hans-Christian Egtvedt (hegtvedt)" <hegtvedt@...co.com>
To:     "netdev@...r.kernel.org" <netdev@...r.kernel.org>
CC:     "stable@...r.kernel.org" <stable@...r.kernel.org>,
        Eric Dumazet <edumazet@...gle.com>,
        Greg Kroah-Hartman <gregkh@...uxfoundation.org>
Subject: Regression in macvlan driver in stable release 4.4.209

Hello,

I am seeing a regression in the macvlan kernel driver after Linux stable 
release 4.4.209, bisecting identifies commit 
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-4.4.y&id=8d28d7e88851b1081b05dc269a27df1c8a903f3e

There seems to be a history behind this, and I do not have the full 
overview of the intention behind the change.

What I see on my target, Aarch64 CPU, is that this patch moves the eth 
pointer in macvlan_broadcast() function some bytes. This will cause 
everything within the ethhdr struct to be wrong AFAICT.

An example:
Original code "eth = eth_hdr(skb)"
    eth = ffffffc007a1b002
New code "eth = skb_eth_hdr(skb)"
    eth = ffffffc007a1b010

Let me know if I can assist in any way.

-- 
Best regards,
Hans-Christian Noren Egtvedt