Re: patch 4.8 "net: handle no dst on skb in icmp6_send"

From: Bronek Kozicki
Date: Wed Jan 11 2017 - 10:57:28 EST


On 11/01/2017 15:50, Jiri Slaby wrote:
On 01/08/2017, 03:28 PM, Bronek Kozicki wrote:
Hello,

any particular reason why this fix
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=79dc7e3f1cd323be4c81aa1a94faa1b3ed987fb2
was missed from stable 4.8 line? Apparently the bug being fixed has its
own https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9919

The patch is marked as:
Fixes: 5d41ce29e ("net: icmp6_send should use dst dev to determine L3
domain")

and that is only in 4.9. So there seems to be a little point backporting
to older kernels.


it is water under the bridge now, but I started this thread because I noticed that some distributions are adding this to their own 4.8 kernels


B.