From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S938026AbdAKPuW (ORCPT ); Wed, 11 Jan 2017 10:50:22 -0500 Received: from mail-wm0-f68.google.com ([74.125.82.68]:35899 "EHLO mail-wm0-f68.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S935661AbdAKPuU (ORCPT ); Wed, 11 Jan 2017 10:50:20 -0500 Subject: Re: patch 4.8 "net: handle no dst on skb in icmp6_send" To: Bronek Kozicki , stable@vger.kernel.org References: Cc: linux-kernel@vger.kernel.org, Greg Kroah-Hartman , David Ahern From: Jiri Slaby Message-ID: <7cb8d93f-52a4-2a7a-cb0a-af591ec4a4fd@suse.cz> Date: Wed, 11 Jan 2017 16:50:17 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.5.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 01/08/2017, 03:28 PM, Bronek Kozicki wrote: > Hello, > > any particular reason why this fix > https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=79dc7e3f1cd323be4c81aa1a94faa1b3ed987fb2 > was missed from stable 4.8 line? Apparently the bug being fixed has its > own https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9919 The patch is marked as: Fixes: 5d41ce29e ("net: icmp6_send should use dst dev to determine L3 domain") and that is only in 4.9. So there seems to be a little point backporting to older kernels. thanks, -- js suse labs