RCE in Linux Kernel via UDP packet

[beiroot]

Ok, so most of you probably already know this:

https://www.cvedetails.com/cve/CVE-2016-10229/

What do you think of this bug?

I read a puzzling comment on one of the sec forums saying something like "it's not a bug, it's an NSA backdoor. A good programmer would never write a code in such a stupid manner. I really wonder why Linus would let such bug through."

I am not a kernel, nor a C developer myself, so I can't really comment whether this is reasonable or just a buffoonery. What do you think?

And my final question is, half a joke half seriously, why such a bug is not possible in OpenBSD kernel?

[e1-531g]

https://twitter.com/taviso/status/852571815079591936
https://plus.google.com/+EricDumazet/posts/ZQie5XjAic2

[beiroot]

ok...and?

[blackhole]

Originally Posted by beiroot

What do you think of this bug?

It seems serious enough.

Originally Posted by beiroot

I read a puzzling comment on one of the sec forums saying something like "it's not a bug, it's an NSA backdoor. A good programmer would never write a code in such a stupid manner. I really wonder why Linus would let such bug through."

Sounds like "buffoonery". Forums and social network sites are usually low on fact and high on FUD.

If it were an "NSA backdoor", it would have been noticed.

RHEL's kernel wasn't affected because apparently that code wasn't implemented: https://bugzilla.redhat.com/show_bug.cgi?id=1439740

It shouldn't affect any OS which doesn't use the Linux kernel's ipv4 stack.

It's patched upstream of course, but all of the phones, smart devices and domestic home networking hardware and miscellaneous embedded stuff will probably still go unpatched by the vendor/user.

This one is another example of where the old "given enough eyeballs, all bugs are shallow" falls down (Heartbleed and ShellShock being more notable ones).