From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.linuxfoundation.org ([140.211.169.12]:46545 "EHLO mail.linuxfoundation.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1750985AbbKFSzZ (ORCPT ); Fri, 6 Nov 2015 13:55:25 -0500 Date: Fri, 6 Nov 2015 10:55:24 -0800 From: Greg KH To: Sheng Yong Cc: stable@vger.kernel.org, jasowang@redhat.com Subject: Re: [PATCH for 3.10-stable] virtio-net: drop NETIF_F_FRAGLIST Message-ID: <20151106185524.GA32467@kroah.com> References: <1445910653-174955-1-git-send-email-shengyong1@huawei.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <1445910653-174955-1-git-send-email-shengyong1@huawei.com> Sender: stable-owner@vger.kernel.org List-ID: On Tue, Oct 27, 2015 at 01:50:53AM +0000, Sheng Yong wrote: > From: Jason Wang > > commit 48900cb6af4282fa0fb6ff4d72a81aa3dadb5c39 upstream. > > virtio declares support for NETIF_F_FRAGLIST, but assumes > that there are at most MAX_SKB_FRAGS + 2 fragments which isn't > always true with a fraglist. > > A longer fraglist in the skb will make the call to skb_to_sgvec overflow > the sg array, leading to memory corruption. > > Drop NETIF_F_FRAGLIST so we only get what we can handle. > > Cc: Michael S. Tsirkin > Signed-off-by: Jason Wang > Acked-by: Michael S. Tsirkin > Signed-off-by: David S. Miller > --- > drivers/net/virtio_net.c | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) This patch isn't in any stable tree, why just add it to 3.10? What about all of the other ones? thanks, greg k-h