0 releases 1,143 tags

RSS feed

• changed/a9/kernel-5.14.0-611.54.4.el9_7 b0ff80e02d

  Compare

  Bump version to 5.14.0-611.54.4

  alukoshko released this 2026-05-13 13:19:43 +00:00 | -159 commits to c8 since this release

  net: skbuff: propagate shared-frag marker through pskb_copy()

  Sibling fix to the xfrm/esp shared-frag patch shipped in 611.54.2.
  __pskb_copy_fclone() and skb_try_coalesce() shallow-copied frag
  descriptors without propagating SKBFL_SHARED_FRAG, so destinations
  referencing externally-owned pages reported skb_has_shared_frag()
  as false. Combined with an nft 'dup to ' rule (or any other
  nf_dup_ipv4 / xt_TEE caller), this lets an unprivileged user write
  into the page cache of a root-owned read-only file via ESP-input
  in-place decryption.

  Backport of https://lore.kernel.org/all/agRfuVOeMI5pbHhY@v4bel/

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads