From: Eric Dumazet <[email protected]>
Date: Wed, 27 Mar 2019 08:21:30 -0700
> net_hash_mix() currently uses kernel address of a struct net,
> and is used in many places that could be used to reveal this
> address to a patient attacker, thus defeating KASLR, for
> the typical case (initial net namespace, &init_net is
> not dynamically allocated)
>
> I believe the original implementation tried to avoid spending
> too many cycles in this function, but security comes first.
>
> Also provide entropy regardless of CONFIG_NET_NS.
>
> Fixes: 0b4419162aa6 ("netns: introduce the net_hash_mix "salt" for hashes")
> Signed-off-by: Eric Dumazet <[email protected]>
> Reported-by: Amit Klein <[email protected]>
> Reported-by: Benny Pinkas <[email protected]>
Applied and queued up for -stable, thanks.
