From patchwork Wed Jul 1 10:46:34 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: tgaige.opensource@witekio.com X-Patchwork-Id: 91485 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id C0A17C43327 for ; Wed, 1 Jul 2026 10:47:08 +0000 (UTC) Received: from relay-r19-hz12.hornetsecurity.com (relay-r19-hz12.hornetsecurity.com [94.100.138.219]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.41923.1782902817583006200 for ; Wed, 01 Jul 2026 03:46:58 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@witekio.com header.s=selector1 header.b=r7sjyZma; spf=permerror, err=parse error for token &{10 18 spf.hornetsecurity.com}: limit exceeded (domain: witekio.com, ip: 94.100.138.219, mailfrom: tgaige@witekio.com) ARC-Authentication-Results: i=2; mx-gate91-hz12.hornetsecurity.com 1; spf=pass reason=mailfrom (ip=52.101.84.124, headerfrom=witekio.com) smtp.mailfrom=witekio.com smtp.helo=db3pr0202cu003.outbound.protection.outlook.com; dkim=pass header.d=witekio.com header.s=selector1 header.a=rsa-sha256; dmarc=pass header.from=witekio.com orig.disposition=pass ARC-Message-Signature: a=rsa-sha256; bh=TqR4fUncWu0U3esKpvMPLnVchHCYcVgxb7emE2faLTU=; c=relaxed/relaxed; d=hornetsecurity.com; h=from:to:date:subject:mime-version:; i=2; s=hse1; t=1782902814; b=pJ42RxIa6ubLZV4P/9jlEGk2vggFKo6Pj7U3S2g5ohItlu1KO7yELhuL+pIp9yYBMfjji+Hi 4Uno25BbonduAwWNjQyhg9bQ7G/V2A3o/7kMfTu6ZHSIwuuNVZMmYx2pV7+ivHBNtMelHCUEAXh izkClKck1JqrNHxV+R0YTRxNTLyVNURRgY64t/ZFyWSl7xd2FyhdotDFSaylR0xltzuxyE9u+SI wBl3EgC0HH6mEEu6qnXNM5Kh8Uwxqjb17tibeKGDnBIT4TcxDE17/ktCa6WIohiz04NsuqUxjsw F7pfAT9GYiZwV0LoBxslrR1oOdcHrEcG8KjTobpcbe8YA== ARC-Seal: a=rsa-sha256; cv=pass; d=hornetsecurity.com; i=2; s=hse1; t=1782902814; b=Mu4zLwsKBZ0VZm4CTGcWDCSdBDgKBimhbyyBvSXVpx1q5hkCggYs0FV372doxgsE7W1QWY8h YYJS1JQ0WObnyy0oExN3qTRMpIWSriR2UuWNrbUM8wHj4Za4bHIU7X52QnoJbd19/PUvqh64vBK 3FqTkRw2BPHjGPWQzfmDJjl3xgwqRM1spcehinKV9lq0QR7L1UWElRLf7hWlTpMNK8kApcd5g73 RlahoUrmc3PCnnWBFR82JwMxp1PkcaE3SMfk6ednjQu9QiWUV5z5TWTBGJhhqh33Sjvy4SLmeSj TQdDM98A+ZPPX+6Q74if9MzbzEcHKaNCFQYziidijkwEQ== Received: from mail-northeuropeazon11020124.outbound.protection.outlook.com ([52.101.84.124]) by mx-gate91-hz12.hornetsecurity.com; Wed, 01 Jul 2026 12:46:54 +0200 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=UvLbcLdHF5dSB2OWxvfX7UGbBjVrGzxXeLI8si9oGwzGVLkX6VMIvD0NPrVylQBf0D2/pkJZEv/Uf21xSs1S/OoHCmtdDGk7R9tkS5tCFQmPwqvZ1IVf1VC0a1578ug66ySwjSHcld7YklfQHHIX3d0J+hvXXUjPP5CqkBxVrOoj/tg+XJiNo+qhOR93BbY9JItt4WXYhhUzNgaiE8GthjPytL630t2uViSdbLoX3CbMUBKgGWosrIYJ+mOBT3zEHyN5kHIWHvnORVWDMPRec0Gu27aDQdCYpWmnOWlZbEsIHVC20dI5kC0WF6LF1CdqxboPEmh5HW3/LgJqCqO5nQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=TqR4fUncWu0U3esKpvMPLnVchHCYcVgxb7emE2faLTU=; b=qTylHMEBe9WInsWBby7g+VuqVl3Ax0UmGF2CSankrVOF+V5hX2dRAJkk5onRAYcuaiKt8CMyVdS7UWdXMjcRgBtp66n+vuSYXVzD2HJOVrpKg2CxciDzjtFv4hFaycartM9w9D09Nf9H4Lqh7fvMH81D1LnFkiBKpslsiGv4ru8NW91Sg+71CINp+E0GysvopPKfDnhTiPtL7Boase2Y69HVFuffWdKnrNZS7KF84d0bzBfDnwES9RzcTyl94Tls2BoVfJWylVaYkAc9dgsgg9OZLRJ4kyL/fLZN/rtIekCTkZf6elio+fQ7II1Op+SH7tukfuOgAbGGPMU37+ZHOA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=witekio.com; dmarc=pass action=none header.from=witekio.com; dkim=pass header.d=witekio.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=witekio.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=TqR4fUncWu0U3esKpvMPLnVchHCYcVgxb7emE2faLTU=; b=r7sjyZmaczXg58FsMnge1xOgS51r/x055C/jJkUEiiH3RPAlYbjc/LWCytkES3uR7A4bOPyFuGs4jF0HQgJI/U/0wwwAQMKtjaGJRwpVxzOTHlboM3hJK2XRf/veCFPUXaoLY1MSNnHtKtCVYevFQf7NUC5Z79VoQrcGsT+tbtG/VMtwF4NuWo/5VGjwhPGcsroT0D/vD5BJ6zlpylyoFwl+IXoFoiwLVrm7SEThmvAFfI8pOpVoUrtQ21uH25n4uaZDiAku0kwyfNYuqN97Dsk66ZO32wb92XQjUaBAwbPe/U0JqEdhC+KtIgN5J5t9Qo6DdDAT9vFfEuQyQBlYdA== Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=witekio.com; Received: from PAXP192MB1405.EURP192.PROD.OUTLOOK.COM (2603:10a6:102:1ad::24) by VI2P192MB3195.EURP192.PROD.OUTLOOK.COM (2603:10a6:800:2df::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.159.19; Wed, 1 Jul 2026 10:46:48 +0000 Received: from PAXP192MB1405.EURP192.PROD.OUTLOOK.COM ([fe80::a160:226a:5870:e1d6]) by PAXP192MB1405.EURP192.PROD.OUTLOOK.COM ([fe80::a160:226a:5870:e1d6%5]) with mapi id 15.21.0181.008; Wed, 1 Jul 2026 10:46:48 +0000 From: tgaige.opensource@witekio.com To: openembedded-core@lists.openembedded.org Cc: hsimeliere.opensource@witekio.com, "Theo Gaige (Schneider Electric)" Subject: [PATCH 1/4] dhcpcd: patch CVE-2026-56113 Date: Wed, 1 Jul 2026 12:46:34 +0200 Message-ID: <20260701104638.3576579-1-tgaige.opensource@witekio.com> X-Mailer: git-send-email 2.43.0 X-ClientProxiedBy: LO4P123CA0275.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:195::10) To PAXP192MB1405.EURP192.PROD.OUTLOOK.COM (2603:10a6:102:1ad::24) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: PAXP192MB1405:EE_|VI2P192MB3195:EE_ X-MS-Office365-Filtering-Correlation-Id: 4d5b5972-ff68-492f-9ee8-08ded75e0d5f X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|23010399003|10070799003|1800799024|366016|376014|52116014|18002099003|13003099007|6133799003|56012099006|3023799007; X-Microsoft-Antispam-Message-Info: +IZMIZ7HKua9Ng00KfD3bG6kupxZtskbZy5mLoFuWkcI80p36SyLMGWnNyu3GVvbqL7MSec4oqmySA/QuKLJ4xtydp5yje6SgGpl8nMEXERZQ5mONMfZ792y4VTiXajZyzE4Y7CWHeMZ7RBAJXT6oOmJ+eP6DdwgGDmKGIjPah3D8CJUpcHUGRLeYG+jrPxzGJFUKyEbhLQbvh8Rde24cDXq6GIcH34JVdYFezp8tbIyLgDxd/F62KS6jg518b50LAJNP0zqUxkGYEXyuYmkWSTI35Rk/Euf8v8+11w5cvI5BZfJJSyZiZy6ArIOJCxENr890UDw9V6UFW7I3ZPwK5qCwuuAFmC/kG75dD+dP1gi2eBwBubWVDaVrAzFlmlJk3WcpXKARlnSQVTRikq8zzklNWhyE7SmVOeLZH+gKGJJ6A4LTlD+tS54YYLt9D6oKyMVvJUWdddFeyWNVi1/Z0hQWQTeEnbwFQLhzLa3SNDdjUB013dZYl85dBLGHputxbyxKlbje4wS0sQpAYX04Qus0cDI/jazTDX6UdnYrW97nBzbLN4BxtKnKWpAZ8oWzZVdyD3z7vSzoXiTtsmsUHX99Nw+Yf2uhC70Tx0UM/m5mqA1tYAq//H5JcQrQCstyarJBun3JbsYR1WYJfUUq1hG4hDRf+yKz1AHzjdwFhs= X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PAXP192MB1405.EURP192.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(23010399003)(10070799003)(1800799024)(366016)(376014)(52116014)(18002099003)(13003099007)(6133799003)(56012099006)(3023799007);DIR:OUT;SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-MS-Exchange-AntiSpam-MessageData-1: 1Nb77pl7wDXQdQ== X-Exchange-RoutingPolicyChecked: GRUiJIapfz4/bV2It/DgZyEfe9pSpXdZ02tRYoFcmUaCqGEDDfIsK+8hYtBJC68ekoxCuEcWhWNdlmAFniUFlmCShJYG3qzuDCEG9G8N1K/1e4/5s1fsjnY86Ir9wnJCmrEQPDHFsVwt7qOW89ZrGrPnJ4f/AMS1cf8ldafKXvHqsaznCjjII684ttYzK3dnOYrbB0d9kswnG6Bh/QaEzjodK8HOItcDPmh66VAB18/qdVe6olcNmW98EWfefcvTX2mgO1V8DEJTjKIqZlUhbeaXlrfmiz3iT/O8nWQ8dRDvYeN0sTvkPvSazUK4CDQcWEISnVGrr5y/Id8MyDIt5g== X-MS-Exchange-AntiSpam-ExternalHop-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-ExternalHop-MessageData-0: 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 X-OriginatorOrg: witekio.com X-MS-Exchange-CrossTenant-Network-Message-Id: 4d5b5972-ff68-492f-9ee8-08ded75e0d5f X-MS-Exchange-CrossTenant-AuthSource: PAXP192MB1405.EURP192.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 01 Jul 2026 10:46:48.5703 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 317e086a-301a-49af-9ea4-48a1c458b903 X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: jY808RvI35OkOmxovkvOhN6ZAspKLJ5I8bjYG1IomY0S9yaqimIQbZwEeJGh+QKNBUgsk9E4jA95dHDGFfgC0A== X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI2P192MB3195 X-cloud-security-sender: tgaige@witekio.com X-cloud-security-recipient: openembedded-core@lists.openembedded.org X-cloud-security-crypt: load encryption module X-cloud-security-Mailarchiv: E-Mail archived for: tgaige.opensource@witekio.com X-cloud-security-Mailarchivtype: outbound X-cloud-security-Virusscan: CLEAN X-cloud-security-disclaimer: This E-Mail was scanned by E-Mailservice on mx-gate91-hz12.hornetsecurity.com with 4gqxXW3wWNz8FvCk X-cloud-security-connect: mail-northeuropeazon11020124.outbound.protection.outlook.com[52.101.84.124], TLS=1, IP=52.101.84.124 X-cloud-security-Digest: 34811824d10232d3a91deb810b42d363 X-cloud-security: scantime:1.206 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 01 Jul 2026 10:47:08 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/239962 From: "Theo Gaige (Schneider Electric)" Backport patch [1] mentionned in [2] [1] https://github.com/NetworkConfiguration/dhcpcd/commit/5733d3c59a5651f64357ac11c98b4f39895c8d25 [2] https://security-tracker.debian.org/tracker/CVE-2026-56113 Signed-off-by: Theo Gaige (Schneider Electric) --- .../dhcpcd/dhcpcd_10.3.2.bb | 1 + .../dhcpcd/files/CVE-2026-56113.patch | 92 +++++++++++++++++++ 2 files changed, 93 insertions(+) create mode 100644 meta/recipes-connectivity/dhcpcd/files/CVE-2026-56113.patch diff --git a/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.2.bb b/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.2.bb index 6ebfc19532..12ba7a1152 100644 --- a/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.2.bb +++ b/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.2.bb @@ -15,6 +15,7 @@ SRC_URI = "git://github.com/NetworkConfiguration/dhcpcd;protocol=https;branch=ma file://dhcpcd.service \ file://dhcpcd@.service \ file://0001-dhcpcd.8-Fix-conflict-error-when-enable-multilib.patch \ + file://CVE-2026-56113.patch \ " SRCREV = "243ad84ac67a87d631ff7eb83b2eed2727acebb5" diff --git a/meta/recipes-connectivity/dhcpcd/files/CVE-2026-56113.patch b/meta/recipes-connectivity/dhcpcd/files/CVE-2026-56113.patch new file mode 100644 index 0000000000..14095685ed --- /dev/null +++ b/meta/recipes-connectivity/dhcpcd/files/CVE-2026-56113.patch @@ -0,0 +1,92 @@ +From f0e7f32646004a472f8322bcee4a38416f88a130 Mon Sep 17 00:00:00 2001 +From: Roy Marples +Date: Tue, 23 Jun 2026 02:17:10 +0100 +Subject: [PATCH] DHCPv6: When deprecating addresses, restart on prefix + deletions + +As that might invalidate the next address to iterate on. + +Reported-by: CuB3y0nd + +(cherry picked from commit 5733d3c59a5651f64357ac11c98b4f39895c8d25) + +CVE: CVE-2026-56113 +Upstream-Status: Backport [https://github.com/NetworkConfiguration/dhcpcd/commit/5733d3c59a5651f64357ac11c98b4f39895c8d25] +Signed-off-by: Theo Gaige (Schneider Electric) +--- + src/dhcp6.c | 21 ++++++++++++++++++--- + 1 file changed, 18 insertions(+), 3 deletions(-) + +diff --git a/src/dhcp6.c b/src/dhcp6.c +index 91341994..8a8a20a0 100644 +--- a/src/dhcp6.c ++++ b/src/dhcp6.c +@@ -2593,12 +2593,13 @@ dhcp6_findia(struct interface *ifp, struct dhcp6_message *m, size_t l, + } + + #ifndef SMALL +-static void ++static bool + dhcp6_deprecatedele(struct ipv6_addr *ia) + { + struct ipv6_addr *da, *dan, *dda; + struct timespec now; + struct dhcp6_state *state; ++ bool freed = false; + + timespecclear(&now); + TAILQ_FOREACH_SAFE(da, &ia->pd_pfxs, pd_next, dan) { +@@ -2624,11 +2625,14 @@ dhcp6_deprecatedele(struct ipv6_addr *ia) + if (IN6_ARE_ADDR_EQUAL(&dda->addr, &da->addr)) + break; + } +- if (dda != NULL) { ++ if (dda != ia && dda != NULL) { + TAILQ_REMOVE(&state->addrs, dda, next); + ipv6_freeaddr(dda); ++ freed = true; + } + } ++ ++ return freed; + } + #endif + +@@ -2636,7 +2640,11 @@ static void + dhcp6_deprecateaddrs(struct ipv6_addrhead *addrs) + { + struct ipv6_addr *ia, *ian; ++#ifndef SMALL ++ bool again; ++#endif + ++again: + TAILQ_FOREACH_SAFE(ia, addrs, next, ian) { + if (ia->flags & IPV6_AF_EXTENDED) + ; +@@ -2658,7 +2666,9 @@ dhcp6_deprecateaddrs(struct ipv6_addrhead *addrs) + /* If we delegated from this prefix, deprecate or remove + * the delegations. */ + if (ia->flags & IPV6_AF_PFXDELEGATION) +- dhcp6_deprecatedele(ia); ++ again = dhcp6_deprecatedele(ia); ++ else ++ again = false; + #endif + + if (ia->flags & IPV6_AF_REQUEST) { +@@ -2671,6 +2681,11 @@ dhcp6_deprecateaddrs(struct ipv6_addrhead *addrs) + if (!(ia->flags & IPV6_AF_EXTENDED)) + ipv6_deleteaddr(ia); + ipv6_freeaddr(ia); ++#ifndef SMALL ++ /* Deletion may invalidate the next pointer so restart */ ++ if (again) ++ goto again; ++#endif + } + } + +-- +2.43.0 + From patchwork Wed Jul 1 10:46:35 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: tgaige.opensource@witekio.com X-Patchwork-Id: 91484 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 90CBBC43458 for ; Wed, 1 Jul 2026 10:47:08 +0000 (UTC) Received: from relay-r19-hz12.hornetsecurity.com (relay-r19-hz12.hornetsecurity.com [94.100.138.219]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.42165.1782902820498917866 for ; Wed, 01 Jul 2026 03:47:01 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@witekio.com header.s=selector1 header.b=bU4WstTX; spf=permerror, err=parse error for token &{10 18 spf.hornetsecurity.com}: limit exceeded (domain: witekio.com, ip: 94.100.138.219, mailfrom: tgaige@witekio.com) ARC-Authentication-Results: i=2; mx-gate91-hz12.hornetsecurity.com 1; spf=pass reason=mailfrom (ip=52.101.84.124, headerfrom=witekio.com) smtp.mailfrom=witekio.com smtp.helo=db3pr0202cu003.outbound.protection.outlook.com; dkim=pass header.d=witekio.com header.s=selector1 header.a=rsa-sha256; dmarc=pass header.from=witekio.com orig.disposition=pass ARC-Message-Signature: a=rsa-sha256; bh=10d82+LoPZTt7Da5/ukCuSSlmSjzBqLWNuw653narBs=; c=relaxed/relaxed; d=hornetsecurity.com; h=from:to:date:subject:mime-version:; i=2; s=hse1; t=1782902818; b=pO1zmpd7F/Z1rYPMdHh0pC1o9DTPF4RtJjWMS2MbVa7N0WQAId4zXiH+17Wq/HD4ugb2A6iB i3QG4IgnhCPg1dJMEVmtl/AYsw3q215XXHUiPzILr+YEr9sXiyMZr3ZWszPZhxDrUCpKXROK2dD WBDbczjku6Y0YzIQN29jVmHsHKxk9OCP8Q1fr+kG6Q2B67d3bGgL1oKL5G2QMswTkX0ESrnRipp AVB12KdcxubLc+6PMKT7hET3o5apnnbexhBOpXbTlzKmqWabL0BvjILRM7ebh7WgRUiv0Qd3v2O amBk7H/wh7K37+3oGZddyyckWJEWLS2N+V4Eh5AwCklTw== ARC-Seal: a=rsa-sha256; cv=pass; d=hornetsecurity.com; i=2; s=hse1; t=1782902818; b=AvVIkW/8Wu1hcq3nEU8zZp+FO5S4i5f7Ke2QE7vNVyYkpte+Ss8sTV1x+B12Elox1dMfB09y jdnnVQO1xYdxpJFLNYijRi8ir9sYH2KybrxKcuCvAOuUCQwefAHbC9e9u3fxB5Ur87uEdREmL+W KlUqrT60KxeFTH5svh85JE7NQ2BTI2PCQr6SGciFv7of5La8VPbiH8F2xvTK218l2PUJawo2OrY h58iwfDgcsxjknwK0t8i/MtOaDAvWtVg0PyTn8NRer8kwAL0maFW8QtcW2xF5nU1wkpm7NuP1eH ruxs077DliY5RMuyoUvfMe1VRY55ZhaGzPqC5srkpu55A== Received: from mail-northeuropeazon11020124.outbound.protection.outlook.com ([52.101.84.124]) by mx-gate91-hz12.hornetsecurity.com; Wed, 01 Jul 2026 12:46:58 +0200 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=f9F/SvIqbSPlgsrIetJXh4ESRImvoZ7bZ2Vhw0Cv0sVHGUWhROiMj3hef55xP0rTpQVAFNE/67Hy3GSFI8tLGrHK/SJh2otx/1ful7YOyfoce0sATy2k6jUq3WNb/jbHsLwbl6ZOeg/7Q6xHX5fTxNJsFGut/hMDArRR/8EsQV7YggV4Yy3FhZcsNs0DtEu7QZSRD00z55LWrsaidTZCoKQGhsuTpZfcZt7TvJXkpda2ZqRV4SyDBQJJwWWyfdCin1pJ5PZE9bhEy71qukWiqnjBo4EhnCM13NH/5j+gFo+v3RiE+PujCUvsLwZAEvyDJJQk0o/+XbLiFrAjLKc7JA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=10d82+LoPZTt7Da5/ukCuSSlmSjzBqLWNuw653narBs=; b=JXrrrFfiUUlQJyJV7o9Oik8W8KH4lXQ8OPDeBPOAusXNHTx0RGedi1lYa6o/7P1kRr8aHddu+zStoq5e2r7Mg6HOy9qoWRnO/Q17pvzroYLoi1vrlmSbOTbSLpvrEcw8f2y+zx3yrU40K3l5a8/uikzQnRpAKdmv91t5mxWdnwMtE9u2Gy9ttsqicwDFyy+GlTjUVSall7dL1rOaYQzhNG8AFnUZ39haflp9BbegW+5fsLsqwXDAjGtWWYgaIheIC/Lq9M0mq3SqRt0BTa0L1j0rSopImp5OYoQzdGs0bya+lMzB60ZFUlgokuFXB1CpBevXQgUl3u/D8gbycS6p9w== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=witekio.com; dmarc=pass action=none header.from=witekio.com; dkim=pass header.d=witekio.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=witekio.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=10d82+LoPZTt7Da5/ukCuSSlmSjzBqLWNuw653narBs=; b=bU4WstTX3NVtS8ydD0JqFFszh6Bmy1sBGUHaNMm2vSTTHqJVr2ZyCEQZQ0cwAsRxKvKsanETxlBW/gEGPBXKTKUJfkUKY+LM3yxwZHhv4Uq/hy9G9Hon3wSTIeUBppejTtqu1xsjfyhu15smUL92TO/1MW6dCLWRkdRgvHJicTa47DUOzTOtkED4ihx1PvnbWqRwEm56COxoSV+EYoix48dkj8uPaiV+5orPyHVe3fwJ/hgLSXWOLsCI1JAXpX1cHVLrXiC2pozM9uP+ijkeU6GhcCJED8DzlCRdPO9L8wwyEHfyAtFzMTGlWgYNsV0hZXgZ5D/UvlnWtr8/0dmTIw== Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=witekio.com; Received: from PAXP192MB1405.EURP192.PROD.OUTLOOK.COM (2603:10a6:102:1ad::24) by VI2P192MB3195.EURP192.PROD.OUTLOOK.COM (2603:10a6:800:2df::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.159.19; Wed, 1 Jul 2026 10:46:50 +0000 Received: from PAXP192MB1405.EURP192.PROD.OUTLOOK.COM ([fe80::a160:226a:5870:e1d6]) by PAXP192MB1405.EURP192.PROD.OUTLOOK.COM ([fe80::a160:226a:5870:e1d6%5]) with mapi id 15.21.0181.008; Wed, 1 Jul 2026 10:46:50 +0000 From: tgaige.opensource@witekio.com To: openembedded-core@lists.openembedded.org Cc: hsimeliere.opensource@witekio.com, "Theo Gaige (Schneider Electric)" Subject: [PATCH 2/4] dhcpcd: patch CVE-2026-56114 Date: Wed, 1 Jul 2026 12:46:35 +0200 Message-ID: <20260701104638.3576579-2-tgaige.opensource@witekio.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20260701104638.3576579-1-tgaige.opensource@witekio.com> References: <20260701104638.3576579-1-tgaige.opensource@witekio.com> X-ClientProxiedBy: LO4P123CA0275.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:195::10) To PAXP192MB1405.EURP192.PROD.OUTLOOK.COM (2603:10a6:102:1ad::24) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: PAXP192MB1405:EE_|VI2P192MB3195:EE_ X-MS-Office365-Filtering-Correlation-Id: e278dfaf-4995-4549-ecbc-08ded75e0ec7 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|23010399003|10070799003|1800799024|366016|376014|52116014|18002099003|13003099007|6133799003|56012099006|3023799007|22082099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PAXP192MB1405.EURP192.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(23010399003)(10070799003)(1800799024)(366016)(376014)(52116014)(18002099003)(13003099007)(6133799003)(56012099006)(3023799007)(22082099003);DIR:OUT;SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-MS-Exchange-AntiSpam-MessageData-1: R+S46hQvYiwSRA== X-Exchange-RoutingPolicyChecked: gaZbm552NBt9EUD7g0aKdaCpVBgDFKvoPaWpPjkPlC9uY/0yMr+AglhvXTDKjgeRuI/VkYfNfQiQAUmsdyxX3x8PhW2qoxhedhxF4AvNoMXWA1IgLXKrzX7naZnXYMitfWnsbkYToI8EqBXL+Re4BXXfMDykCr/PW09fh2va9d9109vdxIVyepG/RGj//fSy9hWtoXaGGm5IK5uBQ7ApmCAqDOACIeHVPbJwZ0W++I7mYfMPunV5YV9rmWNGggBJrpg8yedOLVRC5ihRHSAxuRGEZ88ekj+Fv4ifgnYemnm/FoppZiv5d5N5QzWEQILajNHDoQwyBwefzegUP3bNyg== X-MS-Exchange-AntiSpam-ExternalHop-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-ExternalHop-MessageData-0: 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 X-OriginatorOrg: witekio.com X-MS-Exchange-CrossTenant-Network-Message-Id: e278dfaf-4995-4549-ecbc-08ded75e0ec7 X-MS-Exchange-CrossTenant-AuthSource: PAXP192MB1405.EURP192.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 01 Jul 2026 10:46:50.8914 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 317e086a-301a-49af-9ea4-48a1c458b903 X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: 0fxU/lIqnyan3fsTcXu9jGayGVvIr7oFLCElg8swQ9mOKReE1WngTfUGpW5RWGjPlo3yVUU4kwGgXY9vUs6iNA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI2P192MB3195 X-cloud-security-sender: tgaige@witekio.com X-cloud-security-recipient: openembedded-core@lists.openembedded.org X-cloud-security-crypt: load encryption module X-cloud-security-Mailarchiv: E-Mail archived for: tgaige.opensource@witekio.com X-cloud-security-Mailarchivtype: outbound X-cloud-security-Virusscan: CLEAN X-cloud-security-disclaimer: This E-Mail was scanned by E-Mailservice on mx-gate91-hz12.hornetsecurity.com with 4gqxXb0bCHz8FwrW X-cloud-security-connect: mail-northeuropeazon11020124.outbound.protection.outlook.com[52.101.84.124], TLS=1, IP=52.101.84.124 X-cloud-security-Digest: e1ec32142fe0e57bb724313c8c154b33 X-cloud-security: scantime:1.088 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 01 Jul 2026 10:47:08 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/239963 From: "Theo Gaige (Schneider Electric)" Backport patch [1] mentionned in [2] [1] https://github.com/NetworkConfiguration/dhcpcd/commit/2f00c7bfc408b6582d331932dfa47829c4819029 [2] https://security-tracker.debian.org/tracker/CVE-2026-56114 Signed-off-by: Theo Gaige (Schneider Electric) --- .../dhcpcd/dhcpcd_10.3.2.bb | 1 + .../dhcpcd/files/CVE-2026-56114.patch | 34 +++++++++++++++++++ 2 files changed, 35 insertions(+) create mode 100644 meta/recipes-connectivity/dhcpcd/files/CVE-2026-56114.patch diff --git a/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.2.bb b/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.2.bb index 12ba7a1152..3a6e967657 100644 --- a/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.2.bb +++ b/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.2.bb @@ -16,6 +16,7 @@ SRC_URI = "git://github.com/NetworkConfiguration/dhcpcd;protocol=https;branch=ma file://dhcpcd@.service \ file://0001-dhcpcd.8-Fix-conflict-error-when-enable-multilib.patch \ file://CVE-2026-56113.patch \ + file://CVE-2026-56114.patch \ " SRCREV = "243ad84ac67a87d631ff7eb83b2eed2727acebb5" diff --git a/meta/recipes-connectivity/dhcpcd/files/CVE-2026-56114.patch b/meta/recipes-connectivity/dhcpcd/files/CVE-2026-56114.patch new file mode 100644 index 0000000000..a6b8a44515 --- /dev/null +++ b/meta/recipes-connectivity/dhcpcd/files/CVE-2026-56114.patch @@ -0,0 +1,34 @@ +From 2e27969699676e664898c8f82e2c047762fc426f Mon Sep 17 00:00:00 2001 +From: Roy Marples +Date: Tue, 23 Jun 2026 02:06:55 +0100 +Subject: [PATCH] DHCPv6: Prefix exclude option can be 17 octets (#671) + +Well that's a simple off by one error + +Reported-by: CuB3y0nd + +(cherry picked from commit 2f00c7bfc408b6582d331932dfa47829c4819029) + +CVE: CVE-2026-56114 +Upstream-Status: Backport [https://github.com/NetworkConfiguration/dhcpcd/commit/2f00c7bfc408b6582d331932dfa47829c4819029] +Signed-off-by: Theo Gaige (Schneider Electric) +--- + src/dhcp6.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/src/dhcp6.c b/src/dhcp6.c +index 8a8a20a0..5e497cfd 100644 +--- a/src/dhcp6.c ++++ b/src/dhcp6.c +@@ -1093,7 +1093,7 @@ dhcp6_makemessage(struct interface *ifp) + + /* RFC6603 Section 4.2 */ + if (ap->prefix_exclude_len) { +- uint8_t exb[16], *ep, u8; ++ uint8_t exb[17], *ep, u8; + const uint8_t *pp; + + n = (size_t)((ap->prefix_exclude_len - +-- +2.43.0 + From patchwork Wed Jul 1 10:46:36 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: tgaige.opensource@witekio.com X-Patchwork-Id: 91483 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 9F01DC43602 for ; Wed, 1 Jul 2026 10:47:08 +0000 (UTC) Received: from relay-r19-hz12.hornetsecurity.com (relay-r19-hz12.hornetsecurity.com [94.100.138.219]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.41925.1782902823813058055 for ; Wed, 01 Jul 2026 03:47:04 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@witekio.com header.s=selector1 header.b=PxfWUWWs; spf=permerror, err=parse error for token &{10 18 spf.hornetsecurity.com}: limit exceeded (domain: witekio.com, ip: 94.100.138.219, mailfrom: tgaige@witekio.com) ARC-Authentication-Results: i=2; mx-gate91-hz12.hornetsecurity.com 1; spf=pass reason=mailfrom (ip=52.101.84.124, headerfrom=witekio.com) smtp.mailfrom=witekio.com smtp.helo=db3pr0202cu003.outbound.protection.outlook.com; dkim=pass header.d=witekio.com header.s=selector1 header.a=rsa-sha256; dmarc=pass header.from=witekio.com orig.disposition=pass ARC-Message-Signature: a=rsa-sha256; bh=XrTbo8ygJKXeoMb9md53LhqThpfJOpnPKFPlfHo4fQU=; c=relaxed/relaxed; d=hornetsecurity.com; h=from:to:date:subject:mime-version:; i=2; s=hse1; t=1782902821; b=tg80wCeWjtdqOa4fjjpxfupMfjfcEdpgHmF92Uit6oKabQTwkJBE+v6Yu6z/lU/YTFUJno9d alWWQwF4Qn25nA0SLMydnRHKUpslPmE3A4iB+qN6/wWBFrSXTwiW1uC82gLEqYqmpLqoiH84gJe xfHnSZiklWpeI+MLmQfuz4WQEkxfDP8U40Vn5peLIZAuE0UUxAEn/BpESFJvpVWI7cotKGIPisD 9ilMU+WX7fSuUqHBpkNEmZUTuEqpV30nOa6Q9NJHfrJnDPYiT6l8+xwUgMaMq/EgPgW96PHbnkG vUqOUb70l16NPU/F5c3aXl2s0Dt2OHQbS8aNAv0EOdu6A== ARC-Seal: a=rsa-sha256; cv=pass; d=hornetsecurity.com; i=2; s=hse1; t=1782902821; b=ExmwSDrkckRLDQMr6CFUzUCrXf2gA5N+05CfgztWORLxUrlnwflg5Re2fiCxjOKqcnaGrAqZ sNmI9FiXvGlX72d/Md9n6Zf7rg6xXmw27N7sfJ6Bx7xRZMPS4OB6YMinekxLB4K/d/SWf5sVuxk SJxQDinQ41JGIjDjS2tCljsL2QYDhhpQrScM+uMFeix5pc5bvNh6ROffVlxbV9VIBlT4Yvnj7Uj rp1CCJsQOS+gHET3A11eWgtJBjcm6yaAz52a+Ob7e0Ag6I+aEBZxCCJOnxJHIkcaZ1/uyxKWBQG t/cj5hZ5NZX3sHzP7cP2eBbFl9txFa5kQ5PdL9+yN29KA== Received: from mail-northeuropeazon11020124.outbound.protection.outlook.com ([52.101.84.124]) by mx-gate91-hz12.hornetsecurity.com; Wed, 01 Jul 2026 12:47:01 +0200 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=h5Z/6WtzdVP0SRohdRBQwOJKBOTRQxPHsJohQO9UlKJsUhKyYEL4PCg1PBrbe3GAuT4jNU8cry3e5NCLtxikuXByxNCAZ35HLqQWnGfSEAA6NLyyQOls2fKgWJstZ99gfgS7IuBGoxkgrUJ/cv6Xvm4s6vJyu/MU2ZhAfwOHUTQV/6feYotUgP5THnizrDE+igN66AZeRFg5UZcvkEVz8oc0M+QDvA9/us9YGcmOsXAyJdlnlfrAyXhqGmdf9ES/SE7ROp5HVR1xCF0CBbOy5bq0RPnkWn/PRGmvRcaH/IJxVk9VJj8XAkj9J+yCRwx/L8mzO+ncM3Cv0b40skQhaQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=XrTbo8ygJKXeoMb9md53LhqThpfJOpnPKFPlfHo4fQU=; b=QOZBoxkTPX4YuY+VfWrYEeYZZSVRe5KNPjkxmPMuzzjMOf7cMUEuyr869O9OdcwmBe5nh4zXSXCXmIlN989XR61ym30wVbbW/pmCuhkEZWO8tdtAhfZiF5AKAGMHF1V1rdWZl3fytFncbx3zRg0ZQyV5cTZgo9JLns+jqo1Q84GLfwjzD60AKEn/r3thVYMv3j49lf4r2vyPbBrOtzfcnWE43gk4balHGobIFFIH2mt/0OHwUDlCgxZQamuwJDAWV2XkP1dn8TLY3Vy5f2MeeMx80Ax0ThjLrelmvXHc6YaD2wnatrPLw+hO5BKHXJG8ARYT03/tCZwNuHOHoKgkDg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=witekio.com; dmarc=pass action=none header.from=witekio.com; dkim=pass header.d=witekio.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=witekio.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=XrTbo8ygJKXeoMb9md53LhqThpfJOpnPKFPlfHo4fQU=; b=PxfWUWWsyKK1VBZSbSwya91yBZndTlnpaRg+AVEE8s4d+nu5QNIgiXgW14hehZYOC9iggszqPLaiIKWomB9Bmgy9MC+MU4WXciX+pLHeAoEBsBp0gW9ZJGKx2YPGEevDiuoSo7Nu+fENmAdWhdzRk+UXp8MYhQtVZghTG4t6EaJCGhgY7qmFx7KdMPZHxxxfTddpnzwhwRP6iw0vRdK36UZF2GGpLGVvvJ8QD9jC0WsfRoK9Dd84NH5Jq5mCgVV5ltk7mAtdEXWRuBd48sc2xBg90flP84ULEoqjGZcT19MvDlxh5O3cihsfdociWmsDy5gCT+/nMG9r0NckAZbMhQ== Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=witekio.com; Received: from PAXP192MB1405.EURP192.PROD.OUTLOOK.COM (2603:10a6:102:1ad::24) by VI2P192MB3195.EURP192.PROD.OUTLOOK.COM (2603:10a6:800:2df::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.159.19; Wed, 1 Jul 2026 10:46:55 +0000 Received: from PAXP192MB1405.EURP192.PROD.OUTLOOK.COM ([fe80::a160:226a:5870:e1d6]) by PAXP192MB1405.EURP192.PROD.OUTLOOK.COM ([fe80::a160:226a:5870:e1d6%5]) with mapi id 15.21.0181.008; Wed, 1 Jul 2026 10:46:55 +0000 From: tgaige.opensource@witekio.com To: openembedded-core@lists.openembedded.org Cc: hsimeliere.opensource@witekio.com, "Theo Gaige (Schneider Electric)" Subject: [PATCH 3/4] dhcpcd: patch CVE-2026-56116 Date: Wed, 1 Jul 2026 12:46:36 +0200 Message-ID: <20260701104638.3576579-3-tgaige.opensource@witekio.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20260701104638.3576579-1-tgaige.opensource@witekio.com> References: <20260701104638.3576579-1-tgaige.opensource@witekio.com> X-ClientProxiedBy: LO4P123CA0275.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:195::10) To PAXP192MB1405.EURP192.PROD.OUTLOOK.COM (2603:10a6:102:1ad::24) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: PAXP192MB1405:EE_|VI2P192MB3195:EE_ X-MS-Office365-Filtering-Correlation-Id: 3646fb45-a20b-426d-b770-08ded75e1133 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|23010399003|10070799003|1800799024|366016|376014|52116014|18002099003|13003099007|6133799003|56012099006|3023799007|22082099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PAXP192MB1405.EURP192.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(23010399003)(10070799003)(1800799024)(366016)(376014)(52116014)(18002099003)(13003099007)(6133799003)(56012099006)(3023799007)(22082099003);DIR:OUT;SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-MS-Exchange-AntiSpam-MessageData-1: vidRflTaTNdUFw== X-Exchange-RoutingPolicyChecked: oyIOWOICwGOELojOTamhk8COKypUvU4bc6auFlOrehg2vNSYy2oGU2wPeQzE8bMI8Lg9XbpRn6cjYBzWjNasS9VP1s1f/1IMqVRu4euGcEvsq8H04cWvU140yvX3x7n6Eu3txC3YgnqESfQZJ6iF3FSnajmLJpQnl1/TsiP6pmJrFjIRuvhsDroKDo65yOjx/a9Du5QMmGHCTVRMtyAYie74fdqDXTqSCZiCpwfQKg6QMQOBbwtcJVNPkKVkL3vNJu02b9rkAeIvQ3eQshUNa/Aqii9XiiEm1sVzzO/lbfKOFCnLb6RL6fT+XZMMAfK2HzpELokD544fR4VbEzRVUA== X-MS-Exchange-AntiSpam-ExternalHop-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-ExternalHop-MessageData-0: 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 X-OriginatorOrg: witekio.com X-MS-Exchange-CrossTenant-Network-Message-Id: 3646fb45-a20b-426d-b770-08ded75e1133 X-MS-Exchange-CrossTenant-AuthSource: PAXP192MB1405.EURP192.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 01 Jul 2026 10:46:54.9731 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 317e086a-301a-49af-9ea4-48a1c458b903 X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: AiIgr83+MQhUJxw/IK3aCa/sRGtHPnbNGKAovZUD1Ya+QkP5JM3bZlMmJtdDFmSPC/gaWWQjIfDII/Wzt7l9Jg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI2P192MB3195 X-cloud-security-sender: tgaige@witekio.com X-cloud-security-recipient: openembedded-core@lists.openembedded.org X-cloud-security-crypt: load encryption module X-cloud-security-Mailarchiv: E-Mail archived for: tgaige.opensource@witekio.com X-cloud-security-Mailarchivtype: outbound X-cloud-security-Virusscan: CLEAN X-cloud-security-disclaimer: This E-Mail was scanned by E-Mailservice on mx-gate91-hz12.hornetsecurity.com with 4gqxXf3Zbbz7t7V3 X-cloud-security-connect: mail-northeuropeazon11020124.outbound.protection.outlook.com[52.101.84.124], TLS=1, IP=52.101.84.124 X-cloud-security-Digest: f0c919212fd67697b0d1875ff98354c2 X-cloud-security: scantime:1.068 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 01 Jul 2026 10:47:08 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/239964 From: "Theo Gaige (Schneider Electric)" Backport patch [1] mentionned in [2] [1] https://github.com/NetworkConfiguration/dhcpcd/commit/708b4a56bae080a5b18c2e0c4c6fbe103131a2b0 [2] https://security-tracker.debian.org/tracker/CVE-2026-56116 Signed-off-by: Theo Gaige (Schneider Electric) --- .../dhcpcd/dhcpcd_10.3.2.bb | 1 + .../dhcpcd/files/CVE-2026-56116.patch | 31 +++++++++++++++++++ 2 files changed, 32 insertions(+) create mode 100644 meta/recipes-connectivity/dhcpcd/files/CVE-2026-56116.patch diff --git a/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.2.bb b/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.2.bb index 3a6e967657..8f1615482a 100644 --- a/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.2.bb +++ b/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.2.bb @@ -17,6 +17,7 @@ SRC_URI = "git://github.com/NetworkConfiguration/dhcpcd;protocol=https;branch=ma file://0001-dhcpcd.8-Fix-conflict-error-when-enable-multilib.patch \ file://CVE-2026-56113.patch \ file://CVE-2026-56114.patch \ + file://CVE-2026-56116.patch \ " SRCREV = "243ad84ac67a87d631ff7eb83b2eed2727acebb5" diff --git a/meta/recipes-connectivity/dhcpcd/files/CVE-2026-56116.patch b/meta/recipes-connectivity/dhcpcd/files/CVE-2026-56116.patch new file mode 100644 index 0000000000..2d8345cf18 --- /dev/null +++ b/meta/recipes-connectivity/dhcpcd/files/CVE-2026-56116.patch @@ -0,0 +1,31 @@ +From ae33c2d8fc7319a2957acd6e8efad99116b68dc6 Mon Sep 17 00:00:00 2001 +From: Roy Marples +Date: Tue, 23 Jun 2026 00:34:58 +0100 +Subject: [PATCH] IPv6ND: Free routeinfo when it expires (#670) + +Reported-by: CuB3y0nd + +(cherry picked from commit 708b4a56bae080a5b18c2e0c4c6fbe103131a2b0) + +CVE: CVE-2026-56116 +Upstream-Status: Backport [https://github.com/NetworkConfiguration/dhcpcd/commit/708b4a56bae080a5b18c2e0c4c6fbe103131a2b0] +Signed-off-by: Theo Gaige (Schneider Electric) +--- + src/ipv6nd.c | 1 + + 1 file changed, 1 insertion(+) + +diff --git a/src/ipv6nd.c b/src/ipv6nd.c +index ccf71241..557ff50e 100644 +--- a/src/ipv6nd.c ++++ b/src/ipv6nd.c +@@ -1789,6 +1789,7 @@ ipv6nd_expirera(void *arg) + logwarnx("%s: expired route %s", + rap->iface->name, rinfo->sprefix); + TAILQ_REMOVE(&rap->rinfos, rinfo, next); ++ free(rinfo); + } + } + +-- +2.43.0 + From patchwork Wed Jul 1 10:46:37 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: tgaige.opensource@witekio.com X-Patchwork-Id: 91486 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id CBA10C44500 for ; Wed, 1 Jul 2026 10:47:08 +0000 (UTC) Received: from relay-r19-hz12.hornetsecurity.com (relay-r19-hz12.hornetsecurity.com [94.100.138.219]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.41928.1782902827343767221 for ; Wed, 01 Jul 2026 03:47:07 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@witekio.com header.s=selector1 header.b=muTN9rS5; spf=permerror, err=parse error for token &{10 18 spf.hornetsecurity.com}: limit exceeded (domain: witekio.com, ip: 94.100.138.219, mailfrom: tgaige@witekio.com) ARC-Authentication-Results: i=2; mx-gate91-hz12.hornetsecurity.com 1; spf=pass reason=mailfrom (ip=52.101.84.124, headerfrom=witekio.com) smtp.mailfrom=witekio.com smtp.helo=db3pr0202cu003.outbound.protection.outlook.com; dkim=pass header.d=witekio.com header.s=selector1 header.a=rsa-sha256; dmarc=pass header.from=witekio.com orig.disposition=pass ARC-Message-Signature: a=rsa-sha256; bh=OW1NcN4EsLWQLT2YPBy4lk6vrP8oBVf3gmCRs0h7ihc=; c=relaxed/relaxed; d=hornetsecurity.com; h=from:to:date:subject:mime-version:; i=2; s=hse1; t=1782902824; b=p0S0P0ggOrZZodWoIpb5r+ueGDkcIUB0O+s9YDm7JCoA7P7dguXhZ2VKJG9v0U9x8zRixlQ3 7qq5PXYUB9eTVg51vMMgFqUBul8+MYZ2EcsDt4C1b3OEtysOHCukc6DubPKizZ38sz7asCAomyq 3jSB2RSZ5YeJZHfvUY3GPsCndEESpmB9v9XM7w2S0uLyyEJfN3615Trh4hvP//e+H3ydZY5fTqe MvJVasEaQtRXCj8Yjqlzm1eaRSkLYfHZBXJ6ERZ+RrpeMFhJ7nduSR8T1O+ojgW3Im+H6egktRZ jkftTCvmSocNb80nbeJSV+vvioYO2SUYRTh79FR5AGU/w== ARC-Seal: a=rsa-sha256; cv=pass; d=hornetsecurity.com; i=2; s=hse1; t=1782902825; b=ni5PLFuV0WyqWmIoqk5YfQG2+vawRTC+LMevCr/PdP8jDB0Nqq92D8KFAl7F2yKSiwIuIfQQ YfzOma1wokqZ/QNXCNqlrQI1j3I4cAoBdUw8gtytKPpOZqegyiTCty+9+Inh5JA016FPBy1Alz6 vHvoYi6OZxQYkd3RNc8+Uy9A7+Tdp8NprluKegxlu1cb68psCN2WQXCmxDbfrvHi6jSl74ig3eP OKsFuoEvOVNs/FRSbDC1rvuasGrkb62sYXLCJfm5jsvaOns1cY4HmdiyExfL/zShq8oYkPk9ErZ PCV5FZmBQhRYfKly4TvsynAJRcP9+/MlYPb7Jy4Dg/9gw== Received: from mail-northeuropeazon11020124.outbound.protection.outlook.com ([52.101.84.124]) by mx-gate91-hz12.hornetsecurity.com; Wed, 01 Jul 2026 12:47:04 +0200 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=N6JkigKFeSZfiBxzcPzeYChH9zpi1Y+UPkdhpZDyW5PM3prDLKdMmhpPKtrS7N/zZwbu7AcnZmsiyFwzvNisTrClCP7HcW4aCDgH1WVZQHNAZXZ1z7i08QSI6EVQorstwMCu8MnBV+sooxoF4s5FYW686lb00OHyLnYrfnTNO+gaN2OZL8rCx3weOLxBl5SWR3+sjybf3v859aoNpvjNIC2bKfmgSiuYyFtukyO1o7pJk0eReAIjBwq45xJFN0j36kfoDfLZ6qXHWFoftJoRL/tDjlyn39Fsc6gZnM9bM3aod1XqK+aXeD6wrozPBU2nIm5i/kHPPI98EdwXYdPdUA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=OW1NcN4EsLWQLT2YPBy4lk6vrP8oBVf3gmCRs0h7ihc=; b=vHVebugju7KI+4+bhS0jhG+vrE+zP1TJ8lSc6j9vxo3yzZ14F8vUME2FopYT4/ZTqK14zA5jSFCwavxEOzUJRlvfA3pW2BWD0gUjU5jofPs1yGn+3OUm+pDs+s1cs1cahsEow4eJefXZXdAtqj6nwAGciVqY0lMZOpZvm9fhQVWl1tCyzURFvbaB5CaN0sahOKYMr4iFldckO1UQdpXuF85ZRsLluLBJtZuOC4gizKSjCAcItAobinBX7rfhSNh7fV1mF+gEei2rUGJbgFi3mFXfCdHrWiuGQeJet5jLUdKs6lzv8oZHiiAbUud2yBVZb5fXt9M9trpRx3/UOJvODw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=witekio.com; dmarc=pass action=none header.from=witekio.com; dkim=pass header.d=witekio.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=witekio.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=OW1NcN4EsLWQLT2YPBy4lk6vrP8oBVf3gmCRs0h7ihc=; b=muTN9rS5V05IPFPoBfRBXjomFqBfGbU+Xfb/aWCuaYektK5rOb/GUC5ENqHy7yGU8BZ9Kz53Ic/dotqLcHkpCyNtSSa9z+xHq+pcigljJJZxiiCWJo9+UiDiycz2SxZazkkGV3JKEFIhcFc2T5BoKr6XyAnPEJpovi9sGJzzqe6I20W1HXo7+PTPD2vSwkaJzGjiFF0t93l27A8Ukc6o4lC8NgwFXisIXupyBDtNaLJD69283jpNu2HOXmMu/v0zEAG6F1NeEXeESUIRuRElzNdIQt8DKbLZ6IlZ0uL1hT9eF7h6rFOYGSEYdC9xHswovnErGNGR3YlTlfWdwulmNw== Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=witekio.com; Received: from PAXP192MB1405.EURP192.PROD.OUTLOOK.COM (2603:10a6:102:1ad::24) by VI2P192MB3195.EURP192.PROD.OUTLOOK.COM (2603:10a6:800:2df::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.159.19; Wed, 1 Jul 2026 10:46:56 +0000 Received: from PAXP192MB1405.EURP192.PROD.OUTLOOK.COM ([fe80::a160:226a:5870:e1d6]) by PAXP192MB1405.EURP192.PROD.OUTLOOK.COM ([fe80::a160:226a:5870:e1d6%5]) with mapi id 15.21.0181.008; Wed, 1 Jul 2026 10:46:56 +0000 From: tgaige.opensource@witekio.com To: openembedded-core@lists.openembedded.org Cc: hsimeliere.opensource@witekio.com, "Theo Gaige (Schneider Electric)" Subject: [PATCH 4/4] dhcpcd: patch CVE-2026-56117 Date: Wed, 1 Jul 2026 12:46:37 +0200 Message-ID: <20260701104638.3576579-4-tgaige.opensource@witekio.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20260701104638.3576579-1-tgaige.opensource@witekio.com> References: <20260701104638.3576579-1-tgaige.opensource@witekio.com> X-ClientProxiedBy: LO4P123CA0275.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:195::10) To PAXP192MB1405.EURP192.PROD.OUTLOOK.COM (2603:10a6:102:1ad::24) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: PAXP192MB1405:EE_|VI2P192MB3195:EE_ X-MS-Office365-Filtering-Correlation-Id: dc8c66a8-7a60-4d9b-d664-08ded75e11f1 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|23010399003|10070799003|1800799024|366016|376014|52116014|18002099003|13003099007|6133799003|56012099006|3023799007|22082099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PAXP192MB1405.EURP192.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(23010399003)(10070799003)(1800799024)(366016)(376014)(52116014)(18002099003)(13003099007)(6133799003)(56012099006)(3023799007)(22082099003);DIR:OUT;SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-MS-Exchange-AntiSpam-MessageData-1: DI0PRnBPZE04tQ== X-Exchange-RoutingPolicyChecked: BVjHO2ZqlN5L2ypVXHb1mgyJhdH2CGVYRIJRkoYuJ/CZzRrELYvADu0PaoVvqtfwJLr3amSvd13JUC3pEVZXJzzTDYZDKMhBXav/iQI1MIrNCQSNfQUUu40QLcTOcxUsRwMXcue8HKfqzk2dTY5dkchX+2oUeNE+G6b2xhTuuMp+7qTFdP2V5T3JBrrvTzxlQjBQAZduV8QRsyhAw7Hqb4dfOt7yRrj3zOyCa1SwAtRndkkahR1SwuSmIgNsm3qjR/Q1DMLeJDlR9OS4VxZga9/q3EitX6SH5PAGGihv7znrJnfOhmS8T9R3IqbHgBmZCX9qHnGM6CDv1vfaswU/vg== X-MS-Exchange-AntiSpam-ExternalHop-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-ExternalHop-MessageData-0: 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 X-OriginatorOrg: witekio.com X-MS-Exchange-CrossTenant-Network-Message-Id: dc8c66a8-7a60-4d9b-d664-08ded75e11f1 X-MS-Exchange-CrossTenant-AuthSource: PAXP192MB1405.EURP192.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 01 Jul 2026 10:46:56.2055 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 317e086a-301a-49af-9ea4-48a1c458b903 X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: vJV8t5LZgtZgT4EqJi3CWaoFRxQ4AAYCHltzQkUKq2+bkuyWKl7ObKRGgNp0y5yhXF8SI6vcsXV9rgIr3846JQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI2P192MB3195 X-cloud-security-sender: tgaige@witekio.com X-cloud-security-recipient: openembedded-core@lists.openembedded.org X-cloud-security-crypt: load encryption module X-cloud-security-Mailarchiv: E-Mail archived for: tgaige.opensource@witekio.com X-cloud-security-Mailarchivtype: outbound X-cloud-security-Virusscan: CLEAN X-cloud-security-disclaimer: This E-Mail was scanned by E-Mailservice on mx-gate91-hz12.hornetsecurity.com with 4gqxXj62sfz7tB90 X-cloud-security-connect: mail-northeuropeazon11020124.outbound.protection.outlook.com[52.101.84.124], TLS=1, IP=52.101.84.124 X-cloud-security-Digest: 670b7216fc1ac806a0845f1f54fc578c X-cloud-security: scantime:1.086 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 01 Jul 2026 10:47:08 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/239965 From: "Theo Gaige (Schneider Electric)" Backport patch [1] mentionned in [2] [1] https://github.com/NetworkConfiguration/dhcpcd/commit/78ea09ed1633a583dbcde6e7bab9df4639ec8a34 [2] https://security-tracker.debian.org/tracker/CVE-2026-56117 Signed-off-by: Theo Gaige (Schneider Electric) --- .../dhcpcd/dhcpcd_10.3.2.bb | 1 + .../dhcpcd/files/CVE-2026-56117.patch | 167 ++++++++++++++++++ 2 files changed, 168 insertions(+) create mode 100644 meta/recipes-connectivity/dhcpcd/files/CVE-2026-56117.patch diff --git a/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.2.bb b/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.2.bb index 8f1615482a..b86c249704 100644 --- a/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.2.bb +++ b/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.2.bb @@ -18,6 +18,7 @@ SRC_URI = "git://github.com/NetworkConfiguration/dhcpcd;protocol=https;branch=ma file://CVE-2026-56113.patch \ file://CVE-2026-56114.patch \ file://CVE-2026-56116.patch \ + file://CVE-2026-56117.patch \ " SRCREV = "243ad84ac67a87d631ff7eb83b2eed2727acebb5" diff --git a/meta/recipes-connectivity/dhcpcd/files/CVE-2026-56117.patch b/meta/recipes-connectivity/dhcpcd/files/CVE-2026-56117.patch new file mode 100644 index 0000000000..6ef86204f2 --- /dev/null +++ b/meta/recipes-connectivity/dhcpcd/files/CVE-2026-56117.patch @@ -0,0 +1,167 @@ +From b7bf047e30217e144235a6b00d4c81afbcc5d6ab Mon Sep 17 00:00:00 2001 +From: Roy Marples +Date: Mon, 22 Jun 2026 23:41:53 +0100 +Subject: [PATCH] control: Avoid hangup in the recvdata path + +Instead return an error and bubble it up where it can be +hangup / freed more cleanly. + +Reported-by: CuB3y0nd + +(cherry picked from commit 78ea09ed1633a583dbcde6e7bab9df4639ec8a34) + +CVE: CVE-2026-56117 +Upstream-Status: Backport [https://github.com/NetworkConfiguration/dhcpcd/commit/78ea09ed1633a583dbcde6e7bab9df4639ec8a34] +Signed-off-by: Theo Gaige (Schneider Electric) +--- + src/control.c | 47 ++++++++++++++++++++++++------------------- + src/control.h | 2 +- + src/privsep-control.c | 7 ++++++- + 3 files changed, 33 insertions(+), 23 deletions(-) + +diff --git a/src/control.c b/src/control.c +index ec1c633c..e6115f66 100644 +--- a/src/control.c ++++ b/src/control.c +@@ -115,10 +115,8 @@ control_handle_read(struct fd_list *fd) + bytes = read(fd->fd, buffer, sizeof(buffer) - 1); + if (bytes == -1) + logerr(__func__); +- if (bytes == -1 || bytes == 0) { +- control_hangup(fd); +- return -1; +- } ++ if (bytes == -1 || bytes == 0) ++ return (int)bytes; + + #ifdef PRIVSEP + if (IN_PRIVSEP(fd->ctx)) { +@@ -134,15 +132,13 @@ control_handle_read(struct fd_list *fd) + if (err == 1 && + ps_ctl_sendargs(fd, buffer, (size_t)bytes) == -1) { + logerr(__func__); +- control_free(fd); + return -1; + } +- return 0; ++ return 1; + } + #endif + +- control_recvdata(fd, buffer, (size_t)bytes); +- return 0; ++ return control_recvdata(fd, buffer, (size_t)bytes); + } + + static int +@@ -205,23 +201,31 @@ static void + control_handle_data(void *arg, unsigned short events) + { + struct fd_list *fd = arg; ++ int err; + + if (!(events & (ELE_READ | ELE_WRITE | ELE_HANGUP))) + logerrx("%s: unexpected event 0x%04x", __func__, events); + + if (events & ELE_WRITE && !(events & ELE_HANGUP)) { +- if (control_handle_write(fd) == -1) +- return; ++ err = control_handle_write(fd); ++ if (err == -1) ++ goto hangup; + } + if (events & ELE_READ) { +- if (control_handle_read(fd) == -1) +- return; ++ err = control_handle_read(fd); ++ if (err == -1 || err == 0) ++ goto hangup; + } + if (events & ELE_HANGUP) +- control_hangup(fd); ++ goto hangup; ++ ++ return; ++ ++hangup: ++ control_hangup(fd); + } + +-void ++int + control_recvdata(struct fd_list *fd, char *data, size_t len) + { + char *p = data, *e; +@@ -243,12 +247,13 @@ control_recvdata(struct fd_list *fd, char *data, size_t len) + if (e == NULL) { + errno = EINVAL; + logerrx("%s: no terminator", __func__); +- return; ++ return -1; + } +- if ((size_t)argc >= sizeof(argvp) / sizeof(argvp[0])) { ++ if ((size_t)argc + 1 >= ++ sizeof(argvp) / sizeof(argvp[0])) { + errno = ENOBUFS; + logerrx("%s: no arg buffer", __func__); +- return; ++ return -1; + } + *ap++ = p; + argc++; +@@ -268,12 +273,12 @@ control_recvdata(struct fd_list *fd, char *data, size_t len) + *ap = NULL; + if (dhcpcd_handleargs(fd->ctx, fd, argc, argvp) == -1) { + logerr(__func__); +- if (errno != EINTR && errno != EAGAIN) { +- control_free(fd); +- return; +- } ++ if (errno != EINTR && errno != EAGAIN) ++ return -1; + } + } ++ ++ return 1; + } + + struct fd_list * +diff --git a/src/control.h b/src/control.h +index ef592268..1f09fc8f 100644 +--- a/src/control.h ++++ b/src/control.h +@@ -76,5 +76,5 @@ struct fd_list *control_new(struct dhcpcd_ctx *, int, unsigned int); + void control_free(struct fd_list *); + void control_delete(struct fd_list *); + int control_queue(struct fd_list *, void *, size_t); +-void control_recvdata(struct fd_list *fd, char *, size_t); ++int control_recvdata(struct fd_list *fd, char *, size_t); + #endif +diff --git a/src/privsep-control.c b/src/privsep-control.c +index b9ea7f9c..3cdeedea 100644 +--- a/src/privsep-control.c ++++ b/src/privsep-control.c +@@ -110,6 +110,7 @@ ps_ctl_dispatch(void *arg, struct ps_msghdr *psm, struct msghdr *msg) + struct iovec *iov = msg->msg_iov; + struct fd_list *fd; + unsigned int fd_flags = FD_SENDLEN; ++ int err; + + switch (psm->ps_flags) { + case PS_CTL_PRIV: +@@ -133,7 +134,11 @@ ps_ctl_dispatch(void *arg, struct ps_msghdr *psm, struct msghdr *msg) + if (fd == NULL) + return -1; + ctx->ps_control_client = fd; +- control_recvdata(fd, iov->iov_base, iov->iov_len); ++ err = control_recvdata(fd, iov->iov_base, iov->iov_len); ++ if (err == -1 || err == 0) { ++ control_free(fd); ++ ctx->ps_control_client = NULL; ++ } + break; + case PS_CTL_EOF: + ctx->ps_control_client = NULL; +-- +2.43.0 +