Bug 253290

Summary: [skb] kernel NULL pointer dereference
Product: [Fedora] Fedora Reporter: Paweł Findeisen <dogmad>
Component: kernelAssignee: Kernel Maintainer List <kernel-maint>
Status: CLOSED CURRENTRELEASE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: low Docs Contact:
Priority: low    
Version: 6   
Target Milestone: ---   
Target Release: ---   
Hardware: i386   
OS: Linux   
Whiteboard:
Fixed In Version: 2.6.22.7-57.fc6 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2007-09-25 22:31:52 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
tail -200 /var/log/messages; service --status-all none

Description Paweł Findeisen 2007-08-17 18:55:44 UTC
Description of problem:

Null dereference in kernel when performing firewall test (port scanning from
http://crucialtests.com).
Kernel keeps running.

Version-Release number of selected component (if applicable):
Name        : kernel                       Relocations: (not relocatable)
Version     : 2.6.22.1                          Vendor: Red Hat, Inc.
Release     : 32.fc6                        Build Date: śro 01 sie 2007 20:32:05
CEST
Install Date: czw 16 sie 2007 18:45:47 CEST      Build Host:
ls20-bc1-13.build.redhat.com
Group       : System Environment/Kernel     Source RPM:
kernel-2.6.22.1-32.fc6.src.rpm
Size        : 46898185                         License: GPLv2
Signature   : DSA/SHA1, czw 09 sie 2007 16:07:00 CEST, Key ID b44269d04f2a6fd2
Packager    : Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla>


How reproducible:
Don't know. crucialtests.com offers only one test for free.

Steps to Reproduce:
1. take a host with fc6, with public IP, no firewall
  and some services running.
2. register at crucialtests.com
3. order a standard online security check (safe mode)
4. check the syslog output
  
Actual results:
Oops

Expected results:
Clear log, probably.

Additional info:

Comment 1 Paweł Findeisen 2007-08-17 18:55:44 UTC
Created attachment 161759 [details]
tail -200 /var/log/messages; service --status-all

Comment 2 Chuck Ebbert 2007-08-31 18:25:08 UTC
Can you get a dump of the packets that cause this?
It would probably have to be run on a separate machine to capture the full trace.

Comment 3 Chuck Ebbert 2007-09-14 19:10:39 UTC
Fix in	kernel-2.6.22.6-55.fc6

Comment 6 Mark J. Cox 2007-09-18 09:36:52 UTC
The discussion points to this commit as being when this was broken:
        http://www.mail-archive.com/git-commits-head@vger.kernel.org/msg08795.html

Therefore since Sun Mar 25 20:10:56 2007 and didn't affect 2.6.18 base (and we
didn't patch this in)

So this issue does not affect the kernels as part of Red Hat Enterprise Linux
2.1, 3, 4, or 5.