oss-sec mailing list archives

CVE-2011-2525 kernel: kernel: net_sched: fix qdisc_notify()

From: Eugene Teo <eugene () redhat com>
Date: Tue, 12 Jul 2011 11:20:23 +0800

tc_fill_qdisc() should not be called for builtin qdisc, or it
dereference a NULL pointer to get device ifindex.

References:
http://kerneltrap.org/mailarchive/linux-netdev/2010/5/21/6277805
https://bugzilla.redhat.com/CVE-2011-2525

Upstream commit:
http://git.kernel.org/linus/53b0f08042f04813cd1a7473dacd3edfacb28eb3

Thanks, Eugene

Current thread:

CVE-2011-2525 kernel: kernel: net_sched: fix qdisc_notify() Eugene Teo (Jul 11)