rpms/kernel
11
4
Fork 6
Code Issues Pull requests Releases Activity
0 releases 1,143 tags
  • changed/a10/kernel-6.12.0-124.56.3.el10_1 42132178bc

    Bump version to 6.12.0-124.56.3

    Ghost released this 2026-05-14 12:59:57 +00:00 | -3 commits to c8 since this release

    net: skbuff: propagate shared-frag marker through frag-transfer helpers

    Replace 124.56.2's partial fix (which was a backport of Hyunwoo Kim's
    v1 patch covering only __pskb_copy_fclone() and skb_try_coalesce())
    with a backport of the upstream v3 patch:
    https://lore.kernel.org/all/agW4vC0r8QOUKtRT@v4bel/

    v3 also covers skb_shift() (the new hunk added in v2) and
    skb_gro_receive() / skb_gro_receive_list() (the audit follow-up
    suggested by Sultan Alsawaf in agVpIsaSherjHTYg@sultan-box).

    All five sites moved frag descriptors between skbs without
    propagating the SKBFL_SHARED_FRAG marker, so destinations could end
    up referencing externally-owned or page-cache-backed pages while
    reporting skb_has_shared_frag() as false. Combined with ESP-over-UDP
    and UDP GRO, or any nf_dup_ipv4 / xt_TEE caller, this lets an
    unprivileged user trigger in-place ESP decryption over root-owned
    page-cache pages (CVE-2026-46300, "Fragnesia").

    Downloads