Bug 520301

Summary:	kernel: ipv4: make ip_append_data() handle NULL routing table [mrg-1]
Product:	Red Hat Enterprise MRG	Reporter:	Eugene Teo (Security Response) <eteo>
Component:	realtime-kernel	Assignee:	John Kacur <jkacur>
Status:	CLOSED CURRENTRELEASE	QA Contact:	David Sommerseth <davids>
Severity:	high	Docs Contact:
Priority:	high
Version:	Development	CC:	bhu, jkacur, lgoncalv, ovasik, williams
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:	520297	Environment:
Last Closed:	2010-09-15 15:51:29 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	520297
Bug Blocks:

Description Eugene Teo (Security Response) 2009-08-30 11:24:43 UTC

+++ This bug was initially created as a clone of Bug #520297 +++

Description of problem:
Add a check in ip_append_data() for NULL *rtp to prevent future bugs in callers from being exploitable.

http://git.kernel.org/linus/788d908f2879a17e5f80924f3da2e23f1034482d

Comment 2 John Kacur 2010-09-15 15:51:29 UTC

git describe --contains 788d908f2879a17e5f80924f3da2e23f1034482d
v2.6.31-rc8~7