Candidate: CVE-2006-0454 References: http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=fa60cf7f64a00c16e95717e8dccdb128877e342a Description: Fix extra dst release when ip_options_echo fails When two ip_route_output_key lookups in icmp_send were combined I forgot to change the error path for ip_options_echo to not drop the dst reference since it now sits before the dst lookup. To fix it we simply jump past the ip_rt_put call. Notes: horms> appears to have been added by the following patch which was horms> included in 2.6.12 horms> http://www.kernel.org/git/?p=linux/kernel/git/tglx/history.git;a=commitdiff;h=2c7ec2528b5776bd64a7c1240879087198e57da9 Bugs: upstream: released (2.6.15.3) linux-2.6.16: N/A linux-2.6: released (2.6.16-5) [2.6.15.3.patch] 2.6.8-sarge-security: N/A 2.4.27-sarge-security: N/A