Description: netlink: Add netns check on taps
References:
 https://lkml.org/lkml/2017/12/5/950
 https://patchwork.ozlabs.org/patch/845319/
Notes:
 bwh> The fix accepted upstream is the second version, which doesn't treat the
 bwh> init namespace as special.
 bwh> Introduced in 3.11 by commit bcbde0d449ed "net: netlink: virtual tap device
 bwh> management".
Bugs:
upstream: released (4.15-rc4) [93c647643b48f0131f02e45da3bd367d80443291]
4.9-upstream-stable: released (4.9.74) [0b18782288a2f1c2a25e85d2553c15ea83bb5802]
3.16-upstream-stable: released (3.16.52) [df524750e2d1ead01cceed5ffc0b62166c7630dd]
3.2-upstream-stable: N/A "Vulnerable code not present"
sid: released (4.14.7-1) [bugfix/all/netlink-add-netns-check-on-taps.patch]
4.9-stretch-security: released (4.9.65-3+deb9u1) [bugfix/all/netlink-add-netns-check-on-taps.patch]
3.16-jessie-security: released (3.16.51-3+deb8u1) [bugfix/all/netlink-add-netns-check-on-taps.patch]
3.2-wheezy-security: N/A "Vulnerable code not present"