patches/kernel/0271-net-mpls-prevent-speculative-execution.patch

   1 From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
   2 From: Elena Reshetova <elena.reshetova@intel.com>
   3 Date: Mon, 4 Sep 2017 13:11:55 +0300
   4 Subject: [PATCH] net: mpls: prevent speculative execution
   5 MIME-Version: 1.0
   6 Content-Type: text/plain; charset=UTF-8
   7 Content-Transfer-Encoding: 8bit
   8
   9 CVE-2017-5753
  10 CVE-2017-5715
  11
  12 Real commit text tbd
  13
  14 Signed-off-by: Elena Reshetova <elena.reshetova@intel.com>
  15 Signed-off-by: Tim Chen <tim.c.chen@linux.intel.com>
  16 Signed-off-by: Andy Whitcroft <apw@canonical.com>
  17 Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>
  18 (cherry picked from commit 98a9550398f87c5430d5e893104e21caa1e2e8d3)
  19 Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
  20 ---
  21  net/mpls/af_mpls.c | 2 ++
  22  1 file changed, 2 insertions(+)
  23
  24 diff --git a/net/mpls/af_mpls.c b/net/mpls/af_mpls.c
  25 index ea4f481839dd..08dfb99e19f2 100644
  26 --- a/net/mpls/af_mpls.c
  27 +++ b/net/mpls/af_mpls.c
  28 @@ -50,6 +50,8 @@ static struct mpls_route *mpls_route_input_rcu(struct net *net, unsigned index)
  29         if (index < net->mpls.platform_labels) {
  30                 struct mpls_route __rcu **platform_label =
  31                         rcu_dereference(net->mpls.platform_label);
  32 +
  33 +               gmb();
  34                 rt = rcu_dereference(platform_label[index]);
  35         }
  36         return rt;
  37 --
  38 2.14.2
  39