Re: CVE-2016-10229: MSG_PEEK - URGENT patch needed

Quoting Corey Wright <[email protected]>:

> On Thu, 18 May 2017 18:19:57 +0200
> Romain Rivière <[email protected]> wrote:
>
>> Hi,
>>
>> On 18/05/17 17:34, Ben Green wrote:
>> > Does it patch from the 3.18.44 patch OK?
>>
>> Yup. The 3.18.44 even applies to 3.18.52 with just a few offsets.
>
> and patch-3.18.44-vs2.3.7.5.diff applies to 3.18.53 [1] too with no
> 'FAILED|fuzz' [2].
>
> [1] which i see is finally available as a tarball/patch on kernel.org;
>     i got it out of the linux-stable git repo when gkh first published
>     it earlier this week
>
> [2] except for patching the Makefile with its embedded incremented
>     version number which always fails, of course
>
> i've tested 3.18.53-vs2.3.7.5 and staged it and will reboot to it
> later this week (though separate from the ubuntu kernel security
> updates everywhere else; how far away are we from the "common man"
> creating live kernel updates? ;).

I'm compiling 3.18.53-vs2.3.7.5 now.

My scripts take care of [2] automatically, so I dropped in at no  
errors other than offsets.

Cheers,
Ben