Received: by 2002:a05:6500:1b41:b0:1fb:d597:ff75 with SMTP id cz1csp109653lqb; Tue, 4 Jun 2024 06:37:29 -0700 (PDT) X-Forwarded-Encrypted: i=3; AJvYcCVm2Jxe+RnKVH8tRw5pPYZEb0VVQMKasjlT9SEnE29ccMC1OpVJWZwJnJNBYDoOSRFApH23nlbTptxjear8tk0NbPNMUfwLlapHrJr7uw== X-Google-Smtp-Source: AGHT+IGKLA099sjO+bLp7MOThlcwF2Za8N7VpDDKOTZr8spK/jdTj1xkroxTQFzFsSB7mqaX4Han X-Received: by 2002:a50:9fe6:0:b0:578:59a9:c6eb with SMTP id 4fb4d7f45d1cf-57a364479f0mr9255890a12.15.1717508249166; Tue, 04 Jun 2024 06:37:29 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1717508249; cv=pass; d=google.com; s=arc-20160816; b=g0VMtSG8ktVmeyuSfm9tAT73w4noIrq8ceYVKOuuBcYe1rlDykx6FCShlbnYrGHRW/ /SWJL1cgQdASXpLOG0m6bfOJ10G7K7XUZD11nkibtxdH38IZvYInl2fRLETwFAWBzOBi Q66+hgAcxpRQoa0FsNaVsu+vOVaCT0vaMtSZ0IG+VAIXDQynVOLFN2Pvs32QL7bn0grU aWj5+S+O80EEOI80oPxZREbY0ERXdDWHjEijSylc3F86cbPr+XDEtCnIAHPdb2aTj3Nq q0LM8WlqyLnZ1uLPVP4voSrIVzPyB02W+ITSs6xr2TFB/FOuYIz4cIURSnT0OkBGG0kM XGMQ== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=in-reply-to:content-disposition:mime-version:list-unsubscribe :list-subscribe:list-id:precedence:references:message-id:subject:cc :to:from:date:dkim-signature; bh=Fv0hxnRF3unLytyOLnUe5TOEp7zE30YMHjLmBZHexFI=; fh=xU08tGyWF1PlgDySLd9A8nO6V71N1+ypYro/ApiXA3U=; b=lZ7ZXKoq3MTfSvhn8sSyMP4fF/H0ZJgIeM+i/n9wOvmGsjKnH/N3/R1OhwrSeBw1Df gdAA4diZ9Iji62xUo1N3p0HLWJX+o0s6w+JdUKwTn6M6bJommzYrkW3KWO+/EUxdgREQ 0wVJSlZ630X5B4SgWtY9cGj+Oco+X19Fe2mtQGV/ZzjfwGUNMM8giOWYC8HaVZDJ5wIm VhobeOBk1FLU7vCsjufE9eUeom4wIwP7iF4gT729wtFhwAGKeRKkB19PNxs1O8ZZUwES ZEnvE5j8P+d1m1Ew8B9hCtd9aJrALRECFcCoFECYm9vpFI3LguS7EM3d8E1mLa6x6/DP a1Kw==; dara=google.com ARC-Authentication-Results: i=2; mx.google.com; dkim=pass header.i=@linuxfoundation.org header.s=korg header.b=QPy1U1Wk; arc=pass (i=1 dkim=pass dkdomain=linuxfoundation.org); spf=pass (google.com: domain of linux-kernel+bounces-200717-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:4601:e00::3 as permitted sender) smtp.mailfrom="linux-kernel+bounces-200717-linux.lists.archive=gmail.com@vger.kernel.org"; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=linuxfoundation.org Return-Path: Received: from am.mirrors.kernel.org (am.mirrors.kernel.org. [2604:1380:4601:e00::3]) by mx.google.com with ESMTPS id 4fb4d7f45d1cf-57a31b80e87si5193534a12.36.2024.06.04.06.37.28 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 04 Jun 2024 06:37:29 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel+bounces-200717-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:4601:e00::3 as permitted sender) client-ip=2604:1380:4601:e00::3; Authentication-Results: mx.google.com; dkim=pass header.i=@linuxfoundation.org header.s=korg header.b=QPy1U1Wk; arc=pass (i=1 dkim=pass dkdomain=linuxfoundation.org); spf=pass (google.com: domain of linux-kernel+bounces-200717-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:4601:e00::3 as permitted sender) smtp.mailfrom="linux-kernel+bounces-200717-linux.lists.archive=gmail.com@vger.kernel.org"; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=linuxfoundation.org Received: from smtp.subspace.kernel.org (wormhole.subspace.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by am.mirrors.kernel.org (Postfix) with ESMTPS id B01471F224BF for ; Tue, 4 Jun 2024 13:37:28 +0000 (UTC) Received: from localhost.localdomain (localhost.localdomain [127.0.0.1]) by smtp.subspace.kernel.org (Postfix) with ESMTP id E89F51474A7; Tue, 4 Jun 2024 13:37:08 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="QPy1U1Wk" Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 14E4E146A8C; Tue, 4 Jun 2024 13:37:07 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1717508228; cv=none; b=X5Ui71V5U3Y3iwj3tDmNkxgKb0bIUnF3fDlHciSV/+tPypWGVORwqlDujiIWMScCm1jav6O0MfxpLrwZzYkHV0kBUIcIq5+DJhAkzOU6sSgNX2dubYqUoKIM4gFRYX6U9wVY+7dl1SRBgFpyG75CBorfJEC720AzvknJaz2liTU= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1717508228; c=relaxed/simple; bh=SuQvMSZ0VaKoTSQlIpx3nCfb7mEfk7fB5zR5M39QExs=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=KPghw806xOqRJeCcOAblxHwCbCQCUuwltiSTFfI8LkMqW2QOECCZSBIvDhDHXm36c0ELSdMzKSOw8E2+KiKtonnYO5rk7dOwsO6qtxjNdQ0CxWi7hNd6VZ4N+Ar0nO9KzUrmv2eZlQlR1+ZKOjKer1UddIo4M2B5ABL2cXyNVO8= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=QPy1U1Wk; arc=none smtp.client-ip=10.30.226.201 Received: by smtp.kernel.org (Postfix) with ESMTPSA id EDB04C3277B; Tue, 4 Jun 2024 13:37:06 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1717508227; bh=SuQvMSZ0VaKoTSQlIpx3nCfb7mEfk7fB5zR5M39QExs=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=QPy1U1Wk9cgQv0yfxqrhSyEFRFdMZtqaqlVEaoE4rnpzqVyFPrs/EQ0eblOkkCE6R xZAit4SGTTnblSLTNjpvmRXL99PWILD9BU8gbYLTAip9VfxcvCWVZQk7CbRQp5TK17 o1OP5l8OvhX9QQShkwLDHmH+8GXYZh8oXaL3YcR4= Date: Tue, 4 Jun 2024 14:56:16 +0200 From: Greg Kroah-Hartman To: Michal Hocko Cc: cve@kernel.org, linux-kernel@vger.kernel.org, linux-cve-announce@vger.kernel.org Subject: Re: CVE-2024-35941: net: skbuff: add overflow debug check to pull/push helpers Message-ID: <2024060401-geography-shucking-21d2@gregkh> References: <2024051919-CVE-2024-35941-1a9e@gregkh> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: On Tue, Jun 04, 2024 at 01:01:17PM +0200, Michal Hocko wrote: > AFAICS this patch is not fixing any security bug. It adds debugging > output and triggers a WARN_ON with CONFIG_DEBUG_NET (which could panic > the system with panic_on_warn which has been broadly considered a CVE > material by the kernel CVE team). > > Please drop this CVE. Ick, I thought we had weeded that one out, sorry about that. Now rejected. greg k-h