[LTS 8.8] igb: set max size RX buffer when store bad packet is enabled #296
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
[LTS 8.8]
CVE-2023-45871
VULN-6695
Problem
From the company which discovered the bug:
https://www.omicronenergy.com/download/file/5ddf37266b0d79a7ba5818893202d9c1/
The CVSS 3.1 scoring is somewhat inconsistent, ranging from 7.5 (nist) to 9.8 (above).
Applicability
The
igb
module is enabled inciqlts8_8
configs/kernel-x86_64.config
Solution
The mainline fix is given in bb5ed01. It was backported to multiple stable versions without any changes, as well as to CBR 7.9 in d3573f5, LTS 8.6 in 6ef78b9 and LTS 9.4 in aee509a (by RedHat). The commit applies to
ciqlts8_8
without any modifications as well.kABI check: passed
Boot test: passed
boot-test.log
Kselftests: passed relative
Coverage
android
,bpf
(excepttest_progs
,test_progs-no_alu32
,test_xsk.sh
,test_sockmap
,test_kmod.sh
),breakpoints
,capabilities
,cgroup
,core
,cpu-hotplug
,cpufreq
,drivers/net/bonding
,drivers/net/team
,exec
,firmware
,fpu
,ftrace
,futex
,gpio
,intel_pstate
,ipc
,kcmp
,kexec
,kvm
,lib
,livepatch
,membarrier
,memfd
,memory-hotplug
,mount
,mqueue
,net/forwarding
(exceptmirror_gre_bridge_1d_vlan.sh
,sch_tbf_root.sh
,sch_tbf_ets.sh
,sch_tbf_prio.sh
,mirror_gre_vlan_bridge_1q.sh
,tc_actions.sh
,sch_ets.sh
,ipip_hier_gre_keys.sh
),net/mptcp
(exceptsimult_flows.sh
),net
(exceptgro.sh
,txtimestamp.sh
,xfrm_policy.sh
,ip_defrag.sh
,udpgro_fwd.sh
,reuseaddr_conflict
,reuseport_addr_any.sh
,udpgso_bench.sh
),netfilter
(exceptnft_trans_stress.sh
),nsfs
,pstore
,ptrace
,rseq
,sgx
,sigaltstack
,size
,splice
,static_keys
,tc-testing
,tdx
,timens
,timers
(exceptraw_skew
),tpm2
,vm
,x86
,zram
Reference
kselftests–ciqlts8_8–run1.log
kselftests–ciqlts8_8–run2.log
kselftests–ciqlts8_8–run3.log
Patch
kselftests–ciqlts8_8-CVE-2023-45871–run1.log
kselftests–ciqlts8_8-CVE-2023-45871–run2.log
kselftests–ciqlts8_8-CVE-2023-45871–run3.log
Comparison
The test results for reference and patch are the same.
Note that
igb
doesn't have any selftests defined.Specific tests: skipped