Home | Docs | Forums | Lists | Bugs | Planet | Store | GMN | Get Gentoo!
View Bug Activity | Format For Printing | XML | Clone This Bug
When two ip_route_output_key lookups in icmp_send were combined I forgot to change the error path for ip_options_echo to not drop the dst reference since it now sits before the dst lookup. To fix it we simply jump past the ip_rt_put call. Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: David S. Miller <davem@davemloft.net>
Fixed in 2.6.15.3
And vulnerable since: http://kernel.org/git/?p=linux/kernel/git/torvalds/old-2.6-bkcvs.git;a=commitdiff;h=10e52f732b932a46afe4e8562319df440f680713
*** Bug 121945 has been marked as a duplicate of this bug. ***
ccing kern-sec...
More info here: http://kernelslacker.livejournal.com/35361.html
Sources above and code review show this concerns 2.6.12+ but not earlier and not 2.4 either. Maintainer may want to change Satus Whiteboard to reflect 2.6.12+
FYI: I've just added sys-kernel/vanilla-sources-2.6.15.3 to the tree.
CCing maintainers: ck-sources-2.6 -- marineam hardened-sources-2.6 -- johnm, hardened, kerframil hppa-sources-2.6 -- GMSoft mips-sources-2.6 -- `Kumba rsbac-sources-2.6 -- kang suspend2-sources-2.6 -- brix usermode-sources-2.6 -- dsd xbox-sources-2.6 -- gimli
Fixed in sys-kernel/suspend2-sources-2.6.15-r6.
hppa-source-2.6.15.4_p4 stable on hppa. Enjoy.
Fixed in usermode-sources-2.6.15-r1
Now fixed in: * genpatches-2.6.14-11 * hardened-sources-2.6.14-r6
All fixed now, thanks!