projects / profile / common / kernel-common.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 54e5705) | patch
[PATCH] ip_route_input panic fix (CVE-2006-1525)
authorStephen Hemminger <shemminger@osdl.org>
Tue, 18 Apr 2006 00:27:11 +0000 (17:27 -0700)
committerGreg Kroah-Hartman <gregkh@suse.de>
Tue, 18 Apr 2006 21:31:47 +0000 (14:31 -0700)
commita0b277b4fdcbc24c26af7c5d019e9448a51c79cf
treee754ef3a9b35551fa83e2361120b88a551528ffctree | snapshot
parent54e5705fd460c7621a4d73c71197e2650ba034a2commit | diff
[PATCH] ip_route_input panic fix (CVE-2006-1525)

This fixes http://bugzilla.kernel.org/show_bug.cgi?id=6388
The bug is caused by ip_route_input dereferencing skb->nh.protocol of
the dummy skb passed dow from inet_rtm_getroute (Thanks Thomas for seeing
it). It only happens if the route requested is for a multicast IP
address.

Signed-off-by: Stephen Hemminger <shemminger@osdl.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
net/ipv4/route.c diff | blob | history
Domain: SCM / Uncategorized;