diff --git a/SOURCES/0001-net-virtio-fix-Rx-checksum-calculation.patch b/SOURCES/0001-net-virtio-fix-Rx-checksum-calculation.patch new file mode 100644 index 0000000..88c61d7 --- /dev/null +++ b/SOURCES/0001-net-virtio-fix-Rx-checksum-calculation.patch @@ -0,0 +1,37 @@ +From 606fd08b1bfce6d81c9532a9ecbbbe88aa266793 Mon Sep 17 00:00:00 2001 +From: Olivier Matz +Date: Thu, 28 Nov 2024 12:09:56 +0100 +Subject: [PATCH] net/virtio: fix Rx checksum calculation + +If hdr->csum_start is larger than packet length, the len argument passed +to rte_raw_cksum_mbuf() overflows and causes a segmentation fault. + +Ignore checksum computation in this case. + +CVE-2024-11614 + +Fixes: ca7036b4af3a ("vhost: fix offload flags in Rx path") +Signed-off-by: Maxime Gouin +Signed-off-by: Olivier Matz +Reviewed-by: Maxime Coquelin +--- + lib/vhost/virtio_net.c | 3 +++ + 1 file changed, 3 insertions(+) + +diff --git a/lib/vhost/virtio_net.c b/lib/vhost/virtio_net.c +index 6d53ff932d..e42aabf126 100644 +--- a/lib/vhost/virtio_net.c ++++ b/lib/vhost/virtio_net.c +@@ -2831,6 +2831,9 @@ vhost_dequeue_offload(struct virtio_net *dev, struct virtio_net_hdr *hdr, + */ + uint16_t csum = 0, off; + ++ if (hdr->csum_start >= rte_pktmbuf_pkt_len(m)) ++ return; ++ + if (rte_raw_cksum_mbuf(m, hdr->csum_start, + rte_pktmbuf_pkt_len(m) - hdr->csum_start, &csum) < 0) + return; +-- +2.47.0 + diff --git a/SPECS/dpdk.spec b/SPECS/dpdk.spec index 11365be..ee9707b 100644 --- a/SPECS/dpdk.spec +++ b/SPECS/dpdk.spec @@ -9,7 +9,7 @@ #% define shortcommit0 %(c=%{commit0}; echo ${c:0:7}) %define ver 23.11 -%define rel 1 +%define rel 2 %define srcname dpdk%(awk -F. '{ if (NF > 2) print "-stable" }' <<<%{version}) @@ -31,6 +31,9 @@ Source: https://fast.dpdk.org/rel/dpdk-%{ver}.tar.xz # Only needed for creating snapshot tarballs, not used in build itself Source100: dpdk-snapshot.sh +# CVE-2024-11614 +Patch1: 0001-net-virtio-fix-Rx-checksum-calculation.patch + Summary: Set of libraries and drivers for fast packet processing # @@ -285,34 +288,20 @@ find %{buildroot}%{_datadir}/man/ -type f -a ! -iname "*rte_*" -exec rm {} \; %endif %changelog +* Tue Dec 17 2024 Kevin Traynor - 23.11-2 +- Backport fixes for CVE-2024-11614 (RHEL-68600) + * Fri Dec 15 2023 David Marchand - 23.11-1 -- Rebase to 23.11 (RHEL-19571) +- Rebase to 23.11 (RHEL-19584) -* Tue Apr 11 2023 David Marchand - 22.11-4 -- Fix MTU regression for net/i40e (#2182799) +* Fri Dec 23 2022 Timothy Redaelli - 21.11-3 +- Version bump just to be sure it's updated from dpdk-21.11-2.el8_7 -* Thu Mar 23 2023 Timothy Redaelli - 22.11-3 -- Add support to load compressed firmware (#2179024) - -* Fri Mar 03 2023 Maxime Coquelin - 22.11-2 -- Add ACC100/ACC200 and related test-bbdev application (#2106526, #2138398) - -* Mon Jan 23 2023 Timothy Redaelli - 22.11-1 -- Rebase to 22.11 (#2129066) - -* Mon Sep 12 2022 Timothy Redaelli - 21.11.2-1 -- Rebase to 21.11.2 (#2126159) -- Includes fixes for CVE-2022-2132 (#2107173) and CVE-2022-28199 (#2123616) - -* Wed Jul 13 2022 Timothy Redaelli - 21.11.1-1 -- Rebase to 21.11.1 (#2106856) -- Includes fix for CVE-2021-3839 (#2026642) +* Wed Oct 26 2022 Timothy Redaelli - 21.11-2 +- Backport fixes for CVE-2022-2132 (#2107171) * Tue Nov 23 2021 David Marchand - 21.11-1 -- Rebase to 21.11 (#2030616) - -* Fri Nov 19 2021 Timothy Redaelli - 20.11.1-1 -- Rebase to 20.11.1 (#2024994) +- Rebase to 21.11 (#2029497) * Tue Feb 16 2021 Timothy Redaelli - 20.11-3 - Fix gating since on DPDK 20.11 testpmd is called dpdk-testpmd