blob: f2d0e6c72c72059aabe9fd808406db747feec586 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
|
Description: netfilter: ctnetlink: add a range check for l3/l4 protonum
References:
https://twitter.com/grsecurity/status/1303646421158109185
https://patchwork.ozlabs.org/project/netfilter-devel/patch/20200908150947.12623-2-pablo@netfilter.org/
Notes:
bwh> Introduced in 2.6.17 by commit c1d10adb4a52 "[NETFILTER]: Add
bwh> ctnetlink port for nf_conntrack".
Bugs:
upstream: released (5.9-rc7) [1cc5ef91d2ff94d2bf2de3b3585423e8a1051cb6]
4.19-upstream-stable: needed
4.9-upstream-stable: needed
sid: pending (5.8.10-2) [bugfix/all/netfilter-ctnetlink-add-a-range-check-for-l3-l4-prot.patch]
4.19-buster-security: needed
4.9-stretch-security: needed
|
