From mboxrd@z Thu Jan 1 00:00:00 1970 From: Eric Dumazet Subject: [PATCH net 0/2] tcp: fix SELinux/Smack corruptions Date: Fri, 1 Dec 2017 15:08:11 -0800 Message-ID: <20171201230813.18776-1-edumazet@google.com> Cc: netdev , Eric Dumazet , Eric Dumazet , David Ahern , James Morris , Casey Schaufler To: "David S . Miller" Return-path: Received: from mail-pl0-f67.google.com ([209.85.160.67]:42703 "EHLO mail-pl0-f67.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751031AbdLAXIS (ORCPT ); Fri, 1 Dec 2017 18:08:18 -0500 Received: by mail-pl0-f67.google.com with SMTP id bd8so7092487plb.9 for ; Fri, 01 Dec 2017 15:08:18 -0800 (PST) Sender: netdev-owner@vger.kernel.org List-ID: James Morris reported kernel stack corruption bug that we tracked back to commit 971f10eca186 ("tcp: better TCP_SKB_CB layout to reduce cache line misses") First patch needs to be backported to kernels >= 3.18, while second patch needs to be backported to kernels >= 4.9, since this was the time when inet_exact_dif_match appeared. David Ahern (1): tcp: use IPCB instead of TCP_SKB_CB in inet_exact_dif_match() Eric Dumazet (1): tcp: add tcp_v4_fill_cb()/tcp_v4_restore_cb() include/net/tcp.h | 3 +-- net/ipv4/tcp_ipv4.c | 59 ++++++++++++++++++++++++++++++++++++----------------- net/ipv6/tcp_ipv6.c | 10 +++++---- 3 files changed, 47 insertions(+), 25 deletions(-) -- 2.15.0.531.g2ccb3012c9-goog