netdev - [PATCH 5.10 v2 0/3] Backport fix for CVE-2023-53103

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <20251128131537.4241-1-apanov@astralinux.ru>
Date: Fri, 28 Nov 2025 16:15:34 +0300
From: Alexey Panov <apanov@...ralinux.ru>
To: stable@...r.kernel.org,
	Greg Kroah-Hartman <gregkh@...uxfoundation.org>
Cc: Alexey Panov <apanov@...ralinux.ru>,
	Jay Vosburgh <j.vosburgh@...il.com>,
	Veaceslav Falico <vfalico@...il.com>,
	Andy Gospodarek <andy@...yhouse.net>,
	"David S. Miller" <davem@...emloft.net>,
	Jakub Kicinski <kuba@...nel.org>,
	Moni Shoua <monis@...taire.COM>,
	netdev@...r.kernel.org,
	linux-kernel@...r.kernel.org,
	Alexei Starovoitov <ast@...nel.org>,
	Daniel Borkmann <daniel@...earbox.net>,
	Andrii Nakryiko <andrii@...nel.org>,
	Martin KaFai Lau <kafai@...com>,
	Song Liu <songliubraving@...com>,
	Yonghong Song <yhs@...com>,
	John Fastabend <john.fastabend@...il.com>,
	KP Singh <kpsingh@...nel.org>,
	Nikolay Aleksandrov <nikolay@...ulusnetworks.com>,
	bpf@...r.kernel.org,
	lvc-project@...uxtesting.org
Subject: [PATCH 5.10 v2 0/3] Backport fix for CVE-2023-53103

Changes in v2:
  - Added a new patch fixing bonding regression, based on the Fixes tag in
    c484fcc058ba ("bonding: Fix memory leak when changing bond type to Ethernet")
  - Added a cover letter
  - No changes in patches 1 and 3
  - Retested the reproducer [1]

Tested with the syzkaller reproducer [1].
The issue triggers on vanilla v5.10.y and no longer reproduces with these
patches applied.

Additionally, c484fcc058ba ("bonding: Fix memory leak when changing bond type
to Ethernet") has a Fixes tag pointing to
9ec7eb60dcbc ("bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether
type change"), so it should be ported as well.

[1]: https://syzkaller.appspot.com/bug?extid=9dfc3f3348729cc82277


Ido Schimmel (1):
  bonding: Fix memory leak when changing bond type to Ethernet

Nikolay Aleksandrov (2):
  bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type
    change
  bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails

 drivers/net/bonding/bond_main.c | 24 +++++++++++++++++-------
 1 file changed, 17 insertions(+), 7 deletions(-)

-- 
2.39.5