[LTS 8.6] net: tls, update curr on splice as well #318
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
[LTS 8.6]
CVE-2024-0646
VULN-4133
Problem
https://access.redhat.com/security/cve/CVE-2024-0646
Applicability analysis
The affected file
net/tls/tls_sw.c
inciqlts8_6
has the exact same history as inciqlts8_8
, so the analysis provided in #317 can be transferred to this version unchanged - the vulnerability applies tociqlts8_6
.(Actually the
ciqlts8_8
version has one additional commit which is missing fromciqlts8_6
- a924d04. Coincidentally, it's a CVE patch backport for CVE-2022-49094, which may need to be applied tociqlts8_6
as well.)Solution
Same as for
ciqlts8_8
. See #317.kABI check: passed
Boot test: passed
boot-test.log
Kselftests
General tests: passed relative
Reference
kselftests–ciqlts8_6–run1.log
kselftests–ciqlts8_6–run2.log
Patch
kselftests–ciqlts8_6-CVE-2024-0646–run1.log
kselftests–ciqlts8_6-CVE-2024-0646–run2.log
Comparison
The tests results for reference and patched kernel are the same
net:tls
tests: passedThe general selftests were run for branch
ciqlts8_6
on commit 8e48e58, the one before fc9306d which fixed thenet:tls
results. As this patch applies directly to thetls
andnet:tls
results are important the tests were re-launched on reference kernel at fc9306d and on the patch rebased onto it.Reference
kselftests–tls–ciqlts8_6–run1.log
kselftests–tls–ciqlts8_6–run2.log
kselftests–tls–ciqlts8_6–run3.log
kselftests–tls–ciqlts8_6–run4.log
Patch
kselftests–tls–ciqlts8_6-CVE-2024-0646–run1.log
kselftests–tls–ciqlts8_6-CVE-2024-0646–run2.log
kselftests–tls–ciqlts8_6-CVE-2024-0646–run3.log
kselftests–tls–ciqlts8_6-CVE-2024-0646–run4.log
Comparison
All tests are passing, before and after.
Specific tests: skipped