Commits
Vasily Tarasov authored and Pavel Emelianov committed efb2059f0ba
[PATCH] ipv6: ipv6_fl_socklist is inadvertently shared From: Masayuki Nakagawa <nakagawa.msy@ncos.nec.co.jp> The ipv6_fl_socklist from listening socket is inadvertently shared with new socket created for connection. This leads to a variety of interesting, but fatal, bugs. For example, removing one of the sockets may lead to the other socket's encountering a page fault when the now freed list is referenced. The fix is to not share the flow label list with the new socket. Signed-off-by: Masayuki Nakagawa <nakagawa.msy@ncos.nec.co.jp> Signed-off-by: David S. Miller <davem@davemloft.net> http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=d35690beda1429544d46c8eb34b2e3a8c37ab299 CVE-2007-1592 http://bugzilla.openvz.org/show_bug.cgi?id=612