)]}'
{
  "commit": "29f9d14ef63d5b704fa1f869ef72c3e42e41939a",
  "tree": "c218d8543fe5c6f2655204bfb8d01061e6d25553",
  "parents": [
    "628950379a02a2956ba8a1beeaa18a718922092a"
  ],
  "author": {
    "name": "Jan Beulich",
    "email": "jbeulich@suse.com",
    "time": "Fri Jul 01 09:57:19 2022 +0200"
  },
  "committer": {
    "name": "Meena Shanmugam",
    "email": "meenashanmugam@google.com",
    "time": "Sat Jul 16 03:53:51 2022 +0000"
  },
  "message": "xen-netfront: restore __skb_queue_tail() positioning in xennet_get_responses()\n\ncommit f63c2c2032c2e3caad9add3b82cc6e91c376fd26 upstream.\n\nThe commit referenced below moved the invocation past the \"next\" label,\nwithout any explanation. In fact this allows misbehaving backends undue\ncontrol over the domain the frontend runs in, as earlier detected errors\nrequire the skb to not be freed (it may be retained for later processing\nvia xennet_move_rx_slot(), or it may simply be unsafe to have it freed).\n\nThis is CVE-2022-33743 / XSA-405.\n\nBUG\u003db/239161485\nTEST\u003dpresubmit, validation\nRELEASE_NOTE\u003dFixed CVE-2022-33743 in the Linux kernel.\n\nFixes: 6c5aa6fc4def (\"xen networking: add basic XDP support for xen-netfront\")\nSigned-off-by: Jan Beulich \u003cjbeulich@suse.com\u003e\nReviewed-by: Juergen Gross \u003cjgross@suse.com\u003e\nSigned-off-by: Juergen Gross \u003cjgross@suse.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\ncos-patch: security-moderate\nChange-Id: Ic36c823acafbcd2a1630784b966db1e6f9838981\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/34831\nTested-by: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\nReviewed-by: Oleksandr Tymoshenko \u003covt@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "1a69b5246133b1310e06f670d15be400f22b540e",
      "old_mode": 33188,
      "old_path": "drivers/net/xen-netfront.c",
      "new_id": "a7ebf17f75a38ef282e04455700fe210150cd035",
      "new_mode": 33188,
      "new_path": "drivers/net/xen-netfront.c"
    }
  ]
}