2018-11-29 09:59:32 |
bugproxy |
bug |
|
|
added bug |
2018-11-29 09:59:34 |
bugproxy |
tags |
|
architecture-s39064 bugnameltc-173661 severity-high targetmilestone-inin1810 |
|
2018-11-29 09:59:35 |
bugproxy |
ubuntu: assignee |
|
Skipper Bug Screeners (skipper-screen-team) |
|
2018-11-29 09:59:39 |
bugproxy |
affects |
ubuntu |
linux (Ubuntu) |
|
2018-11-29 10:55:50 |
Frank Heimes |
bug task added |
|
ubuntu-z-systems |
|
2018-11-29 10:55:58 |
Frank Heimes |
ubuntu-z-systems: status |
New |
Triaged |
|
2018-11-29 10:56:02 |
Frank Heimes |
ubuntu-z-systems: importance |
Undecided |
High |
|
2018-11-29 10:56:15 |
Frank Heimes |
ubuntu-z-systems: assignee |
|
Canonical Kernel Team (canonical-kernel-team) |
|
2018-12-03 13:53:34 |
Frank Heimes |
tags |
architecture-s39064 bugnameltc-173661 severity-high targetmilestone-inin1810 |
architecture-s39064 bugnameltc-173661 kernel-da-key severity-high targetmilestone-inin1810 |
|
2018-12-03 15:13:33 |
Joseph Salisbury |
linux (Ubuntu): importance |
Undecided |
High |
|
2018-12-03 15:13:37 |
Joseph Salisbury |
linux (Ubuntu): status |
New |
In Progress |
|
2018-12-03 15:13:43 |
Joseph Salisbury |
linux (Ubuntu): assignee |
Skipper Bug Screeners (skipper-screen-team) |
Joseph Salisbury (jsalisbury) |
|
2018-12-03 15:13:49 |
Joseph Salisbury |
nominated for series |
|
Ubuntu Cosmic |
|
2018-12-03 15:13:49 |
Joseph Salisbury |
bug task added |
|
linux (Ubuntu Cosmic) |
|
2018-12-03 15:13:49 |
Joseph Salisbury |
nominated for series |
|
Ubuntu Disco |
|
2018-12-03 15:13:49 |
Joseph Salisbury |
bug task added |
|
linux (Ubuntu Disco) |
|
2018-12-03 15:13:49 |
Joseph Salisbury |
nominated for series |
|
Ubuntu Bionic |
|
2018-12-03 15:13:49 |
Joseph Salisbury |
bug task added |
|
linux (Ubuntu Bionic) |
|
2018-12-03 15:13:56 |
Joseph Salisbury |
linux (Ubuntu Cosmic): status |
New |
In Progress |
|
2018-12-03 15:14:00 |
Joseph Salisbury |
linux (Ubuntu Bionic): status |
New |
In Progress |
|
2018-12-03 15:14:03 |
Joseph Salisbury |
linux (Ubuntu Cosmic): importance |
Undecided |
High |
|
2018-12-03 15:14:05 |
Joseph Salisbury |
linux (Ubuntu Bionic): importance |
Undecided |
High |
|
2018-12-03 15:14:08 |
Joseph Salisbury |
linux (Ubuntu Cosmic): assignee |
|
Joseph Salisbury (jsalisbury) |
|
2018-12-03 15:14:10 |
Joseph Salisbury |
linux (Ubuntu Bionic): assignee |
|
Joseph Salisbury (jsalisbury) |
|
2018-12-03 17:11:01 |
Frank Heimes |
ubuntu-z-systems: status |
Triaged |
In Progress |
|
2018-12-14 16:47:45 |
Joseph Salisbury |
description |
Description: qeth: fix length check in SNMP processing
Symptom: Undefined behaviour.
Problem: The response for a SNMP request can consist of multiple parts,
which the cmd callback stages into a kernel buffer until all
parts have been received. If the callback detects that the
staging buffer provides insufficient space, it bails out with
error.
This processing is buggy for the first part of the response -
while it initially checks for a length of 'data_len', it later
copies an additional amount of
'offsetof(struct qeth_snmp_cmd, data)' bytes.
Solution: Fix the calculation of 'data_len' for the first part of the
response.
Upstream-ID: 9a764c1e59684c0358e16ccaafd870629f2cfe67
Should be applied to all Ubuntu Releases in Service |
== SRU Justification ==
The response for a SNMP request can consist of multiple parts,
which the cmd callback stages into a kernel buffer until all
parts have been received. If the callback detects that the
staging buffer provides insufficient space, it bails out with
error.
This processing is buggy for the first part of the response -
while it initially checks for a length of 'data_len', it later
copies an additional amount of
'offsetof(struct qeth_snmp_cmd, data)' bytes.
== Fix ==
9a764c1e5968 ("s390/qeth: fix length check in SNMP processing")
== Regression Potential ==
Low. Changes limited to s390.
== Test Case ==
A test kernel was built with this patch and tested by the original bug reporter.
The bug reporter states the test kernel resolved the bug.
== Original bug description ==
Description: qeth: fix length check in SNMP processing
Symptom: Undefined behaviour.
Problem: The response for a SNMP request can consist of multiple parts,
which the cmd callback stages into a kernel buffer until all
parts have been received. If the callback detects that the
staging buffer provides insufficient space, it bails out with
error.
This processing is buggy for the first part of the response -
while it initially checks for a length of 'data_len', it later
copies an additional amount of
'offsetof(struct qeth_snmp_cmd, data)' bytes.
Solution: Fix the calculation of 'data_len' for the first part of the
response.
Upstream-ID: 9a764c1e59684c0358e16ccaafd870629f2cfe67
Should be applied to all Ubuntu Releases in Service |
|
2019-01-09 10:51:30 |
Stefan Bader |
linux (Ubuntu Disco): status |
In Progress |
Fix Committed |
|
2019-01-10 17:28:40 |
Khaled El Mously |
linux (Ubuntu Bionic): status |
In Progress |
Fix Committed |
|
2019-01-10 17:28:42 |
Khaled El Mously |
linux (Ubuntu Cosmic): status |
In Progress |
Fix Committed |
|
2019-01-14 08:28:07 |
Frank Heimes |
ubuntu-z-systems: status |
In Progress |
Fix Committed |
|
2019-01-15 10:33:58 |
Brad Figg |
tags |
architecture-s39064 bugnameltc-173661 kernel-da-key severity-high targetmilestone-inin1810 |
architecture-s39064 bugnameltc-173661 kernel-da-key severity-high targetmilestone-inin1810 verification-needed-cosmic |
|
2019-01-15 10:37:50 |
Brad Figg |
tags |
architecture-s39064 bugnameltc-173661 kernel-da-key severity-high targetmilestone-inin1810 verification-needed-cosmic |
architecture-s39064 bugnameltc-173661 kernel-da-key severity-high targetmilestone-inin1810 verification-needed-bionic verification-needed-cosmic |
|
2019-01-15 16:21:43 |
Joseph Salisbury |
linux (Ubuntu Bionic): assignee |
Joseph Salisbury (jsalisbury) |
|
|
2019-01-15 16:21:46 |
Joseph Salisbury |
linux (Ubuntu Cosmic): assignee |
Joseph Salisbury (jsalisbury) |
|
|
2019-01-15 16:21:49 |
Joseph Salisbury |
linux (Ubuntu Disco): assignee |
Joseph Salisbury (jsalisbury) |
|
|
2019-01-15 19:28:15 |
Joseph Salisbury |
bug |
|
|
added subscriber Joseph Salisbury |
2019-01-15 19:28:18 |
Joseph Salisbury |
removed subscriber Joseph Salisbury |
|
|
|
2019-01-28 17:12:01 |
Launchpad Janitor |
linux (Ubuntu Bionic): status |
Fix Committed |
Fix Released |
|
2019-01-28 17:12:01 |
Launchpad Janitor |
cve linked |
|
2018-14625 |
|
2019-01-28 17:12:01 |
Launchpad Janitor |
cve linked |
|
2018-16882 |
|
2019-01-28 17:12:01 |
Launchpad Janitor |
cve linked |
|
2018-17972 |
|
2019-01-28 17:12:01 |
Launchpad Janitor |
cve linked |
|
2018-18281 |
|
2019-01-28 17:12:01 |
Launchpad Janitor |
cve linked |
|
2018-19407 |
|
2019-02-04 08:48:45 |
Launchpad Janitor |
linux (Ubuntu Cosmic): status |
Fix Committed |
Fix Released |
|
2019-02-04 18:51:29 |
Frank Heimes |
linux (Ubuntu Disco): status |
Fix Committed |
Fix Released |
|
2019-02-04 18:51:33 |
Frank Heimes |
ubuntu-z-systems: status |
Fix Committed |
Fix Released |
|
2019-02-14 15:51:35 |
Andy Whitcroft |
tags |
architecture-s39064 bugnameltc-173661 kernel-da-key severity-high targetmilestone-inin1810 verification-needed-bionic verification-needed-cosmic |
architecture-s39064 bugnameltc-173661 kernel-da-key kernel-fixup-verification-needed-bionic severity-high targetmilestone-inin1810 verification-needed-cosmic |
|
2019-02-14 16:09:09 |
Brad Figg |
tags |
architecture-s39064 bugnameltc-173661 kernel-da-key kernel-fixup-verification-needed-bionic severity-high targetmilestone-inin1810 verification-needed-cosmic |
architecture-s39064 bugnameltc-173661 kernel-da-key kernel-fixup-verification-needed-bionic severity-high targetmilestone-inin1810 verification-needed-bionic verification-needed-cosmic |
|
2019-02-14 16:13:35 |
Andy Whitcroft |
tags |
architecture-s39064 bugnameltc-173661 kernel-da-key kernel-fixup-verification-needed-bionic severity-high targetmilestone-inin1810 verification-needed-bionic verification-needed-cosmic |
architecture-s39064 bugnameltc-173661 kernel-da-key kernel-fixup-verification-needed-bionic severity-high targetmilestone-inin1810 verification-needed-cosmic |
|
2019-02-14 16:17:46 |
Andy Whitcroft |
tags |
architecture-s39064 bugnameltc-173661 kernel-da-key kernel-fixup-verification-needed-bionic severity-high targetmilestone-inin1810 verification-needed-cosmic |
architecture-s39064 bugnameltc-173661 kernel-da-key kernel-fixup-verification-needed-bionic severity-high targetmilestone-inin1810 verification-done-bionic verification-needed-cosmic |
|
2019-07-24 20:57:07 |
Brad Figg |
tags |
architecture-s39064 bugnameltc-173661 kernel-da-key kernel-fixup-verification-needed-bionic severity-high targetmilestone-inin1810 verification-done-bionic verification-needed-cosmic |
architecture-s39064 bugnameltc-173661 cscc kernel-da-key kernel-fixup-verification-needed-bionic severity-high targetmilestone-inin1810 verification-done-bionic verification-needed-cosmic |
|