From 0f290e026b5da1628c1c8330afcc729422b4c48a Mon Sep 17 00:00:00 2001
From: Olaf Hering <ohering@suse.de>
Date: Feb 01 2022 14:02:53 +0000
Subject: Merge remote-tracking branch 'kerncvs/SLE12-SP5_EMBARGO' into SLE12-SP5-AZURE_EMBARGO


---

diff --git a/patches.suse/net-tipc-validate-domain-record-count-on-input.patch b/patches.suse/net-tipc-validate-domain-record-count-on-input.patch
new file mode 100644
index 0000000..10b4d5d
--- /dev/null
+++ b/patches.suse/net-tipc-validate-domain-record-count-on-input.patch
@@ -0,0 +1,28 @@
+From 170d40fe8a20eafd725b0ce3a5685e0c4b758cbf Mon Sep 17 00:00:00 2001
+From: Denis Kirjanov <denis.kirjanov@suse.com>
+Date: Fri, 28 Jan 2022 19:43:28 +0300
+Subject: [PATCH] net: tipc: validate domain record count on input
+Patch-mainline: Not yet, will be submitted upstream`
+References: bsc#1195254 CVE-2022-0435
+
+Signed-off-by: Denis Kirjanov <denis.kirjanov@suse.com>
+---
+ net/tipc/monitor.c | 2 ++
+ 1 file changed, 2 insertions(+)
+
+diff --git a/net/tipc/monitor.c b/net/tipc/monitor.c
+index 254ddc2c3914..99fcb42d0af2 100644
+--- a/net/tipc/monitor.c
++++ b/net/tipc/monitor.c
+@@ -463,6 +463,8 @@ void tipc_mon_rcv(struct net *net, void
+ 		return;
+ 	if ((dlen < new_dlen) || ntohs(arrv_dom->len) != new_dlen)
+ 		return;
++	if (new_member_cnt >= MAX_MON_DOMAIN)
++		return;
+ 
+ 	/* Synch generation numbers with peer if link just came up */
+ 	if (!state->synched) {
+-- 
+2.16.4
+
diff --git a/series.conf b/series.conf
index 46351b0..b1c0a6c 100644
--- a/series.conf
+++ b/series.conf
@@ -60614,6 +60614,7 @@
 	patches.suse/SUNRPC-call_alloc-async-tasks-mustn-t-block-waiting-.patch
 	patches.suse/SUNRPC-improve-swap-handling-scheduling-and-PF_MEMAL.patch
 	patches.suse/SUNRPC-xprt-async-tasks-mustn-t-block-waiting-for-me.patch
+	patches.suse/net-tipc-validate-domain-record-count-on-input.patch
 
 	########################################################
 	# end of sorted patches