On Fri, Jan 25, 2019 at 10:48:33AM +0800, Mao Wenan wrote: > There is one CVE: CVE-2018-5391 kernel: IP fragments with random offsets > allow a > remote denial of service (FragmentSmack), > A fix is a merge commit in the Linux kernel tree: > https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c30f1fc041b74ecdb072dd44f858750414b8b19f > > consisting of the following commits: > 7969e5c40dfd04799d4341f1b7cd266b6e47f227 ip: discard IPv4 datagrams with > overlapping segments. > 385114dec8a49b5e5945e77ba7de6356106713f4 net: modify skb_rbtree_purge to > return the truesize of all purged skbs. > fa0f527358bd900ef92f925878ed6bfbd51305cc ip: use rb trees for IP frag queue. > > All above patches are with rb tree to fix this CVE, which is very similar the > CVE-2018-5390, that I have backport > to stable 4.4 branch in last year. > > In these patchset, I will backport some patches to fix CVE-2018-5391 with rb > tree. > > v1->v2: in this patch, ipv6: defrag: drop non-last frags smaller than min mtu > fix the incorrect return value of nf_ct_frag6_gather.
Thanks for fixing that up, I've queued the patches up now, let's see if they pass the testers :) greg k-h
