SRU Request submitted: https://lists.ubuntu.com/archives/kernel-team/2018-March/090520.html
** Description changed: - Description: qeth: fix L3 next-hop im xmit qeth hdr + == SRU Justification == + The current code accesses rtable->rt_gateway without checking that rtable + is a valid address. The accidental access to a lowcore area results in a + random next-hop address in the qeth_hdr. rtable (or more precisely, + skb_dst(skb)) can be NULL in rare cases (for instance together with AF_PACKET sockets). - Symptom: wrong destination address in qdio header + The solution is to add the missing NULL-ptr checks, which is done by + commit ec2c6726322f. - Problem: The current code accesses rtable->rt_gateway without checking - that rtable is a valid address. The accidental access to a - lowcore area results in a random next-hop address in the - qeth_hdr. - rtable (or more precisely, skb_dst(skb)) can be NULL in rare - cases (for instance together with AF_PACKET sockets). + Commit ec2c6726322f is in mainline as of v4.13-rc5, so this fix is only + needed in Xenial. - Solution: Add the missing NULL-ptr checks. - Reproduction: AF_PACKET program sending raw data + == Fix == + ec2c6726322f ("s390/qeth: fix L3 next-hop in xmit qeth hdr") + + == Regression Potential == + Low. Limited to s390. + + == Test Case == + A test kernel was built with this patch and tested by the original bug reporter. + The bug reporter states the test kernel resolved the bug. + Upstream Commit: ec2c6726322f0d270bab477e4904bf9496f70ee5 kernel 4.13 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1750813 Title: qeth: fix L3 next-hop im xmit qeth hdr To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1750813/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs