[kernel-sec-discuss] r5463 - active

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-08-11 06:46:19 +0000 (Fri, 11 Aug 2017)
New Revision: 5463

Modified:
   active/CVE-2017-11600
Log:
Add notes for CVE-2017-11600

Modified: active/CVE-2017-11600
===================================================================
--- active/CVE-2017-11600	2017-08-11 06:39:08 UTC (rev 5462)
+++ active/CVE-2017-11600	2017-08-11 06:46:19 UTC (rev 5463)
@@ -1,9 +1,12 @@
 Description: xfrm migrate out-of-bound access 
 References:
  http://seclists.org/bugtraq/2017/Jul/30
+ http://marc.info/?t=150169629800003&r=1&w=2
+ http://marc.info/?l=linux-netdev&m=150169627919528&w=2
 Notes:
  bwh> Introduced by commit 5c79de6e79cd "[XFRM]: User interface for handling
  bwh> XFRM_MSG_MIGRATE" in 2.6.21.
+ carnil> proposed upstream patch: https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec.git/commit/?id=7bab09631c2a303f87a7eb7e3d69e888673b9b7e
 Bugs:
 upstream: needed
 4.9-upstream-stable: needed