commit 816e9c6c226227c4862b2067aace0f450cc92635 Author: Greg Kroah-Hartman Date: Thu Dec 15 10:38:27 2005 -0800 Linux 2.6.13.5 commit f4e4e0fa2b42a7701e833fd04cac70ff0d28fa9f Author: Sven Hartge Date: Sat Oct 8 21:14:34 2005 -0700 [PATCH] Fix compile error in irq.c irq.c is missing the inclusion of asm/io.h, which causes readb() and writeb() the be undefined. Signed-off-by: Sven Hartge Signed-off-by: David S. Miller Signed-off-by: Chris Wright Signed-off-by: Greg Kroah-Hartman commit e545fd941928c6ff87571e6742f81d7659c0578d Author: Al Viro Date: Tue Nov 8 15:03:46 2005 +0000 [PATCH] CVE-2005-2709 sysctl unregistration oops You could open the /proc/sys/net/ipv4/conf// file, then wait for interface to go away, try to grab as much memory as possible in hope to hit the (kfreed) ctl_table. Then fill it with pointers to your function. Then do read from file you've opened and if you are lucky, you'll get it called as ->proc_handler() in kernel mode. So this is at least an Oops and possibly more. It does depend on an interface going away though, so less of a security risk than it would otherwise be. Signed-off-by: Greg Kroah-Hartman commit 20b233a95e9d0a146a1c160d0874545323336a50 Author: Stephen Hemminger Date: Tue Oct 11 13:33:28 2005 -0700 [PATCH] br: fix race on bridge del if This fixes the RCU race on bridge delete interface. Basically, the network device has to be detached from the bridge in the first step (pre-RCU), rather than later. At that point, no more bridge traffic will come in, and the other code will not think that network device is part of a bridge. This should also fix the XEN test problems. If there is another 2.6.13-stable, add it as well. Signed-off-by: Stephen Hemminger Signed-off-by: Chris Wright Signed-off-by: Greg Kroah-Hartman