CVE-2010-4251: packet backlog can get too large
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest7 of 8 patches 4 repliesIn review
7 of 8 patches are in this archive. The cover letter announces 8.
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 2/8 | udp: use limited socket backlognet/ net/ | +17 | 0 replies | |
| 3/8 | x25: use limited socket backlognet/ | +1 | 0 replies | |
| 4/8 | sctp: use limited socket backlognet/ net/ | +30 | 0 replies | |
| 5/8 | tipc: use limited socket backlognet/ | +4 | 0 replies | |
| 6/8 | tcp: use limited socket backlognet/ net/ | +8 | 0 replies | |
| 7/8 | llc: use limited socket backlognet/ | +2 | 0 replies | |
| 8/8 | net: backlog functions renameinclude/ net/ net/ +10 more | +18 | 0 replies |
Reviews trailers per patch
6 of 7 patches have a Reviewed-by or Acked-by.
| Patch | Eric Dumazet | Allan Stephens | Arnaldo Carvalho de Melo |
|---|---|---|---|
| 2/8 | A-b | ||
| 3/8 | A-b | ||
| 4/8 | |||
| 5/8 | A-b | A-b | |
| 6/8 | A-b | ||
| 7/8 | A-b | A-b | |
| 8/8 | A-b |
Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 3 reviewers.
Cover letter [patch 0/8 2.6.32] CVE-2010-4251: packet backlog can get too large
I'm still very new to this whole -stable business so please let me know if I do somethig wrong.
This patch series is to address CVE-2010-4251 for the 2.6.32 stable kernel. Here is the CVE summary:
"The socket implementation in net/core/sock.c in the Linux kernel
before 2.6.34 does not properly manage a backlog of received packets, which allows remote attackers to cause a denial of service (memory consumption) by sending a large amount of network traffic, as demonstrated by netperf UDP tests."
[patch 1/8] introduces sk_add_backlog_limited()
[patch 2-7/8] change each network protocol to use sk_add_backlog_limited()
where appropriate.
[patch 8/8] renames sk_add_backlog() to __sk_add_backlog() and
sk_add_backlog_limited() to sk_add_backlog().
The patches mostly apply without changes. The exception is:
[patch 2/8] udp: use limited socket backlog
Then the rename [patch 8/8] needed to be changed as well to match.
regards,
dan carpenter