Bug 520299

Summary:	kernel: ipv4: make ip_append_data() handle NULL routing table [rhel-4.9]
Product:	Red Hat Enterprise Linux 4	Reporter:	Eugene Teo (Security Response) <eteo>
Component:	kernel	Assignee:	Jiri Pirko <jpirko>
Status:	CLOSED ERRATA	QA Contact:	Network QE <network-qe>
Severity:	high	Docs Contact:
Priority:	high
Version:	4.9	CC:	dhoward, jolsa, jplans, jskrabal, jtluka, lwang, rkhan, vgoyal
Target Milestone:	rc	Keywords:	ZStream
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:	520297	Environment:
Last Closed:	2011-02-16 15:30:13 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	520297
Bug Blocks:	537016

Description Eugene Teo (Security Response) 2009-08-30 11:22:46 UTC

+++ This bug was initially created as a clone of Bug #520297 +++

Description of problem:
Add a check in ip_append_data() for NULL *rtp to prevent future bugs in callers from being exploitable.

http://git.kernel.org/linus/788d908f2879a17e5f80924f3da2e23f1034482d

Comment 4 RHEL Program Management 2009-10-13 13:49:59 UTC

This request was evaluated by Red Hat Product Management for inclusion in a Red
Hat Enterprise Linux maintenance release.  Product Management has requested
further review of this request by Red Hat Engineering, for potential
inclusion in a Red Hat Enterprise Linux Update release for currently deployed
products.  This request is not yet committed for inclusion in an Update
release.

Comment 7 Vivek Goyal 2009-11-16 16:01:54 UTC

Committed in 89.16.EL . RPMS are available at http://people.redhat.com/vgoyal/rhel4/

Comment 12 Mike Gahagan 2011-01-04 20:51:47 UTC

confirmed fix is in the -94 kernel.

Comment 13 errata-xmlrpc 2011-02-16 15:30:13 UTC

An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHSA-2011-0263.html