Messages in this thread | | | Date | Tue, 16 May 2017 07:20:09 +0200 | From | Willy Tarreau <> | Subject | Re: CVE-2016-10229 in 4.4.x series |
| |
On Mon, May 15, 2017 at 06:09:53PM -0700, Steven Pease wrote: > Hi, > > This is my first post - not currently subscribed so please CC me. :) I > searched a bit for this question, but couldn't find an answer (Googled > '2016-10229 site:lkml.org'). > > Does CVE-2016-10229 affect the newest version of the 4.4.x kernel > series (currently 4.4.68) and are there any plans to fix this in the > 4.4 kernel series?
This one was fixed by upstream commit 197c949 ("udp: properly support MSG_PEEK with truncated buffers"), which was backported in 4.4 as commit dfe2042d96 in 4.4.21. So in short, 4.4.68 is safe.
Willy
| |