In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
hsr: broadcast netlink notifications in the device’s net namespace<\/p>\n
The HSR generic netlink family sets .netnsok = true. HSR devices can
\nlive in network namespaces other than init_net.<\/p>\n
Two async notifiers broadcast events with genlmsg_multicast(). They
\nare hsr_nl_ringerror() and hsr_nl_nodedown(). That helper delivers
\nonly on the default genl socket in init_net. So the events always land
\nin init_net. The network namespace of the device does not matter.<\/p>\n
This has two effects. A listener in the device’s own namespace never
\nsees its own ring error and node down events. A privileged listener in
\ninit_net receives events from HSR devices in other namespaces. The
\npayload carries the peer node MAC (HSR_A_NODE_ADDR) and the slave port
\nifindex (HSR_A_IFINDEX).<\/p>\n
Switch both callers to genlmsg_multicast_netns(). Other families with
\n.netnsok = true already do this. Examples are gtp, ovpn, team,
\nbatman-adv, netdev-genl, ethtool and handshake.<\/p>\n
hsr_nl_ringerror() already has the slave port. It uses
\ndev_net(port->dev). hsr_nl_nodedown() takes the namespace from the
\nmaster port via hsr_port_get_hsr().<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
hsr: broadcast netlink notifications in the device’s net namespace<\/p>\n
The HSR generic netlink family sets .netnsok = true. HSR device<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-28666","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/28666","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=28666"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=28666"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=28666"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}